https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8521
Bug ID: 8521
Summary: DMARC_TEMPERROR when a DMARC lookup takes more than a
second
Product: Spamassassin
Version: SVN Trunk (Latest Devel Version)
Hardware: All
OS: All
Status: NEW
Severity: normal
Priority: P2
Component: Plugins
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: Undefined
Created attachment 6223
--> https://bz.apache.org/SpamAssassin/attachment.cgi?id=6223&action=edit
patch for DMARC plugin
The DMARC plugin sets Mail::DMARC to use SpamAssassin's Net::DNS::Resolver
object. A consequence of the setup is that a blocking lookup by Mail::DMARC
gets a single try of 1 second. Since version 2.20261030, Mail::DMARC returns a
temperror result, which the plugin reports as DMARC_TEMPERROR, when a policy
lookup fails, which will happen with any reply that is slower than one second.
This is showing up as intermittent failures in t/dmarc.t on the GitHub Actions
runners. It likely would happen sporadically in production with slow
nameservers.
The attached patch gives Mail::DMARC its own resolver with the same name
servers and other settings, except that a lookup is resent after 1 second and
allowed 3 seconds in all. That is as long as an SPF lookup gets.
--
You are receiving this mail because:
You are the assignee for the bug.
