Jonathan Allen wrote:
Matt Kettler wrote:
Try adding a -D to that command line, you'll get general debugging, which
should report on the state of the DNS modules, if it thinks DNS is working
(based on doing some simple MX lookups), etc.
In the output I got:
[18501] dbg: dns: testing resolver nameservers: 158.152.1.58, 158.152.1.43
[18501] dbg: dns: trying (3) cingular.com...
[18501] dbg: dns: looking up NS for 'cingular.com'
[18501] dbg: dns: NS lookup of cingular.com using 158.152.1.58 succeeded => DNS
available (set dns_available to override)
[18501] dbg: dns: is DNS available? 1
...
[18501] dbg: uridnsbl: domains to query:
[18501] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl-notfirsthop
[18501] dbg: dns: checking RBL sa-accredit.habeas.com., set habeas-firsttrusted
[18501] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl
[18501] dbg: dns: checking RBL sa-other.bondedsender.org., set bsp-untrusted
[18501] dbg: dns: checking RBL combined.njabl.org., set njabl-notfirsthop
[18501] dbg: dns: checking RBL combined.njabl.org., set njabl
[18501] dbg: dns: checking RBL combined-HIB.dnsiplists.completewhois.com., set
whois
[18501] dbg: dns: checking RBL list.dsbl.org., set dsbl-notfirsthop
[18501] dbg: dns: checking RBL bl.spamcop.net., set spamcop
[18501] dbg: dns: checking RBL sa-trusted.bondedsender.org., set
bsp-firsttrusted
[18501] dbg: dns: checking RBL combined-HIB.dnsiplists.completewhois.com., set
whois-notfirsthop
[18501] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs-notfirsthop
[18501] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs
[18501] dbg: dns: checking RBL iadb.isipp.com., set iadb-firsttrusted
Assuming you didn't cut out lines between the above "dns: checking RBL"
lines, you've got a trust path issue. You should see additional lines
after each of those, such as (pruned for brevity):
[9452] dbg: dns: checking RBL sbl-xbl.spamhaus.org., ...
[9452] dbg: dns: IPs found: full-external: .. untrusted: .. originating:
[9452] dbg: dns: only inspecting the following IPs: ...
[9452] dbg: dns: launching DNS A query for ip.addr.sbl-xbl.spamhaus.org.
[9452] dbg: dns: launching DNS A query for ip.addr.sbl-xbl.spamhaus.org.
[9452] dbg: dns: checking RBL sbl-xbl.spamhaus.org., ...
[9452] dbg: dns: IPs found: full-external: .. untrusted: .. originating:
[9452] dbg: dns: only inspecting the following IPs: ...
Check out http://wiki.apache.org/spamassassin/TrustPath before Matt
beats you into submission. ;)
Daryl
