> 17 seconds is way too long for name resolution. Does it take
> that long from the command line (for an uncached query)?
No, it's pretty snappy all around. But with a 15 second timeout,
spamassassin -D showed all timeouts for the DNSBL. The URIBL's
appeared to have successful queries even at that point, but I can't
get them to actually score against anything. I'm not sure what the
difference between them (at the lookup level) is.
# time dig test.surbl.org.sc.surbl.org a | less
; <<>> DiG 9.2.2-P3 <<>> test.surbl.org.sc.surbl.org a
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29925
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 14, ADDITIONAL: 0
;; QUESTION SECTION:
;test.surbl.org.sc.surbl.org. IN A
;; ANSWER SECTION:
test.surbl.org.sc.surbl.org. 2023 IN A 127.0.0.2
;; AUTHORITY SECTION:
sc.surbl.org. 823 IN NS n.surbl.org.
sc.surbl.org. 823 IN NS a.surbl.org.
sc.surbl.org. 823 IN NS b.surbl.org.
sc.surbl.org. 823 IN NS c.surbl.org.
sc.surbl.org. 823 IN NS d.surbl.org.
sc.surbl.org. 823 IN NS e.surbl.org.
sc.surbl.org. 823 IN NS f.surbl.org.
sc.surbl.org. 823 IN NS g.surbl.org.
sc.surbl.org. 823 IN NS h.surbl.org.
sc.surbl.org. 823 IN NS i.surbl.org.
sc.surbl.org. 823 IN NS j.surbl.org.
sc.surbl.org. 823 IN NS k.surbl.org.
sc.surbl.org. 823 IN NS l.surbl.org.
sc.surbl.org. 823 IN NS m.surbl.org.
;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Dec 7 06:09:17 2004
;; MSG SIZE rcvd: 285
real 0m1.030s
user 0m0.010s
sys 0m0.010s
> Are you sure you're using 3.0.1 configs?
Pretty sure:
# spamassassin -V
SpamAssassin version 3.0.1
running on Perl version 5.8.1
# vi /usr/share/spamassassin/25_uribl.cf
...
uridnsbl URIBL_SBL sbl.spamhaus.org. TXT
body URIBL_SBL eval:check_uridnsbl('URIBL_SBL')
describe URIBL_SBL Contains an URL listed in the SBL blocklist
tflags URIBL_SBL net
urirhssub URIBL_SC_SURBL multi.surbl.org. A 2
body URIBL_SC_SURBL eval:check_uridnsbl('URIBL_SC_SURBL')
describe URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
tflags URIBL_SC_SURBL net
...
> IIRC one of the recent FreeBSD installations had the 3.0.1
> config file going to the wrong directory for some reason.
> It should be in the recent list archives.
This is on Fedora Core 1, updated via CPAN if I remember right.
I appreciate the help, too. Let me know if there's any other
information I can get for you. Thanks!
--
Matthew 'Shandower' Romanek
IDS Analyst
