At 12:44 PM -0700 11/1/01, Warren Michelsen imposed structure on a stream of electrons, yielding: >In examining logs generated while trying to figure out why >dnsreport.com could not contact my mail servers, I got to wondering >why SIMS takes so long to respond to HELO. From one of my server >logs: > >14:54:03 4 SMTP-698([24.240.171.218]) Input Line: HELO dnsreport.com\r >14:54:03 5 SMTP-698([24.240.171.218]) *Status=21 >14:54:03 4 SMTP-698(dnsreport.com) Looking for dnsreport.com >14:54:18 3 SMTP-698(dnsreport.com) Failed to verify. Real address is >[24.240.171.218:3884] >14:54:18 4 SMTP-698(dnsreport.com) Sending 250 SMTP.az.net cannot >verify dnsreport.com\r\n > > >And from the other: > >14:35:17 4 SMTP-212([24.240.171.218]) Input Line: HELO dnsreport.com\r >14:35:17 4 SMTP-212(dnsreport.com) Looking for dnsreport.com >14:35:47 3 SMTP-212(dnsreport.com) Failed to verify. Real address is >[24.240.171.218:4325] >14:35:47 4 SMTP-212(dnsreport.com) Sending 250 MDCCLXXVI.com cannot >verify dnsreport.com\r\n > >Isn't 15-30 seconds a bit long?
Not if the server which is connecting is giving a bogus HELO. SIMS does a DNS lookup on the HELO matches the connecting IP address. If there is no DNS record for the HELO argument, it can take a fairly long time in some cases to determine that. I find it a bit amusing that this operation is doing this deeply stupid thing. I'm not terribly impressed with some of their standards either, as they seem too eager to take advisory pieces of RFC's that clearly do not apply to all cases and flag non-compliance as "FAIL!" which is simply inappropriate. (for example, there are reasons for my DNS timings being as they are, and I think it is absurd to apply the suggestions of RFC1912 as if they are globally relevant.) -- Bill Cole [EMAIL PROTECTED] ############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
