On 11/5/10 4:00 PM, Mark Martinec wrote:
It certainly looks like a DNS resolver problem. What is your /etc/resolv.conf?
The Net::DNS only uses the first nameserver from that file.
To turn on debugging in Net::DNS (assuming bourne-like shell):
$ RES_OPTIONS="debug" spamassassin -D -t<test.msg
it is it, its SA 3.3.1 and perl 5.10.1 :-)
but I have others like this without problems.
and, BY HAND, cli works fine. what am I looking for here? note the
problems show up and say 'no ipv6 dns'.
(I seem to remember some issues.. but I can't remember right now)
RES_OPTIONS="debug" spamassassin -D -t < /tmp/7p-VJq4gogIM.eml
;; res_setoptions("debug", "env")..
;; debug
;; res_nquerydomain(256.1, <Nil>, 1, 1)
;; res_query(256.1, 1, 1)
;; res_nmkquery(QUERY, 256.1, IN, A)
;; res_send()
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15886
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; 256.1, type = A, class = IN
;; Querying server (# 1) address = 127.0.0.1
;; new DG socket
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15886
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; 256.1, type = A, class = IN
. 2h58m20s IN SOA a.root-servers.net. nstld.verisign-grs.com. (
2010110501 ; serial
30M ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
;; rcode = (NXDOMAIN), counts = an:0 ns:1 ar:0
;; res_nquerydomain(256.1, crgplaw.com, 1, 1)
;; res_query(256.1.crgplaw.com, 1, 1)
;; res_nmkquery(QUERY, 256.1.crgplaw.com, IN, A)
;; res_send()
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15887
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; 256.1.crgplaw.com, type = A, class = IN
;; Querying server (# 1) address = 127.0.0.1
;; new DG socket
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15887
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; 256.1.crgplaw.com, type = A, class = IN
crgplaw.com. 2h58m20s IN SOA dns211.a.register.com.
root.register.com. (
2006021652 ; serial
8H ; refresh
2H ; retry
1W ; expiry
4H ) ; minimum
;; rcode = (NXDOMAIN), counts = an:0 ns:1 ar:0
res_nsearch failed (-1)
Nov 5 16:03:55.453 [16361] dbg: logger: adding facilities: all
Nov 5 16:03:55.453 [16361] dbg: logger: logging level is DBG
Nov 5 16:03:55.453 [16361] dbg: generic: SpamAssassin version 3.3.1
Nov 5 16:03:55.453 [16361] dbg: generic: Perl 5.010001,
PREFIX=/usr/local, DEF_RULES_DIR=/usr/local/share/spamassassin,
LOCAL_RULES_DIR=/usr/local/etc/mail/spamassassin,
LOCAL_STATE_DIR=/var/db/spamassassin
Nov 5 16:03:55.453 [16361] dbg: config: timing enabled
Nov 5 16:03:55.454 [16361] dbg: config: score set 0 chosen.
Nov 5 16:03:55.457 [16361] dbg: util: running in taint mode? yes
Nov 5 16:03:55.457 [16361] dbg: util: taint mode: deleting unsafe
environment variables, resetting PATH
Nov 5 16:03:55.457 [16361] dbg: util: PATH included '/sbin', keeping
Nov 5 16:03:55.457 [16361] dbg: util: PATH included '/bin', keeping
Nov 5 16:03:55.458 [16361] dbg: util: PATH included '/usr/sbin', keeping
Nov 5 16:03:55.458 [16361] dbg: util: PATH included '/usr/bin', keeping
Nov 5 16:03:55.458 [16361] dbg: util: PATH included '/usr/games', keeping
Nov 5 16:03:55.458 [16361] dbg: util: PATH included '/usr/local/sbin',
keeping
Nov 5 16:03:55.459 [16361] dbg: util: PATH included '/usr/local/bin',
keeping
Nov 5 16:03:55.459 [16361] dbg: util: PATH included '/root/bin', which
is unusable, dropping: No such file or directory
Nov 5 16:03:55.459 [16361] dbg: util: final PATH set to:
/sbin:/bin:/usr/sbin:/usr/bin:/usr/games:/usr/local/sbin:/usr/local/bin
;; res_querydomain(::, crgplaw.com)
;; res_query(::.crgplaw.com, 1, 1)
;; res_nmkquery(QUERY, ::.crgplaw.com, IN, A)
;; res_send()
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15888
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; ::.crgplaw.com, type = A, class = IN
;; Querying server (# 1) address = 127.0.0.1
;; new DG socket
;; timeout
;; Querying server (# 2) address = 192.168.140.26
;; new DG socket
;; timeout
;; Querying server (# 3) address = 192.168.140.29
;; new DG socket
;; timeout
;; Querying server (# 1) address = 127.0.0.1
;; timeout
;; Querying server (# 2) address = 192.168.140.26
server rejected query:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 15888
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; ::.crgplaw.com, type = A, class = IN
;; Querying server (# 3) address = 192.168.140.29
;; new DG socket
;; timeout
;; res_query: send error
;; res_query(::.crgplaw.com, 1, 28)
;; res_nmkquery(QUERY, ::.crgplaw.com, IN, AAAA)
;; res_send()
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15889
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; ::.crgplaw.com, type = AAAA, class = IN
;; Querying server (# 1) address = 127.0.0.1
;; new DG socket
;; timeout
;; Querying server (# 2) address = 192.168.140.26
;; new DG socket
;; timeout
;; Querying server (# 3) address = 192.168.140.29
;; new DG socket
;; timeout
;; Querying server (# 1) address = 127.0.0.1
;; timeout
;; Querying server (# 2) address = 192.168.140.26
server rejected query:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 15889
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; ::.crgplaw.com, type = AAAA, class = IN
;; Querying server (# 3) address = 192.168.140.29
;; new DG socket
;; timeout
;; res_query: send error
;; res_querydomain(::, <Nil>)
;; res_query(::, 1, 1)
;; res_nmkquery(QUERY, ::, IN, A)
;; res_send()
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15890
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; ::, type = A, class = IN
;; Querying server (# 1) address = 127.0.0.1
;; new DG socket
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15890
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; ::, type = A, class = IN
. 2h57m55s IN SOA a.root-servers.net. nstld.verisign-grs.com. (
2010110501 ; serial
30M ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
;; rcode = 3, ancount=0
;; res_query(::, 1, 28)
;; res_nmkquery(QUERY, ::, IN, AAAA)
;; res_send()
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15891
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; ::, type = AAAA, class = IN
;; Querying server (# 1) address = 127.0.0.1
;; new DG socket
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15891
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; ::, type = AAAA, class = IN
. 2h57m55s IN SOA a.root-servers.net. nstld.verisign-grs.com. (
2010110501 ; serial
30M ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
;; rcode = 3, ancount=0
Nov 5 16:04:35.475 [16361] dbg: dns: no ipv6
Nov 5 16:04:35.475 [16361] dbg: dns: is Net::DNS::Resolver available? yes
Nov 5 16:04:35.476 [16361] dbg: dns: Net::DNS version: 0.66
Nov 5 16:04:35.490 [16361] dbg: config: using
"/usr/local/etc/mail/spamassassin" for site rules pre files
Mark
--
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
ISN: 1259*1300
>*| *SECNAP Network Security Corporation
* Certified SNORT Integrator
* 2008-9 Hot Company Award Winner, World Executive Alliance
* Five-Star Partner Program 2009, VARBusiness
* Best in Email Security,2010: Network Products Guide
* King of Spam Filters, SC Magazine 2008
______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________
