>... >Subject: Excessive DNS Requests >From: lister lynch <[EMAIL PROTECTED]> >To: users@spamassassin.apache.org > >Our ISP, Covad, is periodically claiming that we have excessive DNS >requests and is threatening to turn off our service. It's primarily due >to SA, I think. Looked around for answers, and already set a bunch of >the BL checks to 0.0 to turn off the rules. Any idea how to further >prevent the excessive DNS requests? > >Setup: >SA running on FC1 as firewall, passing mail thru to an Exchange server >on the inside. > >Thanks a bunch for any insight,
1) run your own caching name server. 2) If you do mone than 10K messages a day, make your server "stub" the roots of the bl domains. 3) If you do 50K+ or 100K+, consider rsync and local secondary service for those lists who allow it. Of the above, "1" will get you the most, the fastest; "2" never seems to be discussed anywhere, but if you are a bind/named user, it will take off 5-10% of your load; If "3" is appropriate, you *really* need some long term planning also. You could always "buy" DNS service, lots of companies sell it. But please do not abuse a public server (there still are quite a few - mainly academic, but a few corporate). Paul Shupak [EMAIL PROTECTED] P.S. Just curious, but do you have any idea how many lookups you are doing and/or how many Covad thinks is excessive? (I *was* a Covad customer a few bankruptcies ago, but they could keep the line up reliably for my site.)