Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Bug#718547: postfix-policyd-spf-python: policyd-spf times out when one of DNS servers in resolv.conf (not the first) is down

245 views
Skip to first unread message

Pavel Volkov

unread,
Aug 2, 2013, 2:30:02 AM8/2/13
to
Package: postfix-policyd-spf-python
Version: 1.0-2
Severity: normal

Dear Maintainer,

I call policyd-spf-python from Postfix.
I have 3 DNS servers in resolv.conf. The only options in resolv.conf are "nameserver" (3 of them) and "domain" (1).
There's no rotate option.
The last DNS server is currently down, the first two are operating and answering.
On incoming email the mail.log throws Temperror and says:

Aug 2 07:47:23 luna postfix/spawn[3525]: warning: command /usr/bin/policyd-spf exit status 1
Aug 2 07:47:44 luna postfix/smtpd[3520]: warning: problem talking to server private/policy-spf: Connection timed out

Or:

Aug 2 07:49:04 luna policyd-spf[3528]: Traceback (most recent call last):
Aug 2 07:49:04 luna postfix/spawn[3527]: warning: command /usr/bin/policyd-spf exit status 1

If I delete the last nameserver, everything operates well.


-- System Information:
Debian Release: 7.1
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages postfix-policyd-spf-python depends on:
ii adduser 3.113+nmu3
ii postfix 2.9.6-2
ii python 2.7.3-4
ii python-spf 2.0.7-3
ii python2.7 2.7.3-6

postfix-policyd-spf-python recommends no packages.

Versions of packages postfix-policyd-spf-python suggests:
ii python-authres 0.402-1

-- Configuration Files:
/etc/postfix-policyd-spf-python/policyd-spf.conf changed:
debugLevel = 1
defaultSeedOnly = 1
HELO_reject = SPF_Not_Pass
Mail_From_reject = Fail
PermError_reject = False
TempError_Defer = False
skip_addresses = 127.0.0.0/8,::ffff:127.0.0.0//104,::1//128
Domain_Whitelist = yandex.net,yandex.ru,google.com,junkemailfilter.com


-- no debconf information


--
To UNSUBSCRIBE, email to debian-bugs-...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Scott Kitterman

unread,
Aug 6, 2013, 2:20:02 AM8/6/13
to
On Friday, August 02, 2013 10:18:19 Pavel Volkov wrote:
> Package: postfix-policyd-spf-python
> Version: 1.0-2
> Severity: normal
>
> Dear Maintainer,
>
> I call policyd-spf-python from Postfix.
> I have 3 DNS servers in resolv.conf. The only options in resolv.conf are
> "nameserver" (3 of them) and "domain" (1). There's no rotate option.
> The last DNS server is currently down, the first two are operating and
> answering. On incoming email the mail.log throws Temperror and says:

What happens if you patch /usr/share/pyshared/DNS/Base.py with the attached
patch?

Scott K
python-dns.timeout_patch

Pavel Volkov

unread,
Aug 6, 2013, 11:40:02 AM8/6/13
to
On Tuesday 06 August 2013 02:09:58 Scott Kitterman wrote:
> What happens if you patch /usr/share/pyshared/DNS/Base.py with the attached
> patch?

With the patch mail is delivered, no errors are logged.

Scott Kitterman

unread,
Aug 6, 2013, 12:40:03 PM8/6/13
to


Pavel Volkov <capt-o...@yandex.ru> wrote:
>On Tuesday 06 August 2013 02:09:58 Scott Kitterman wrote:
>> What happens if you patch /usr/share/pyshared/DNS/Base.py with the
>attached
>> patch?
>
>With the patch mail is delivered, no errors are logged.

Thanks. I've sent the patch to the upstream maintainer for review.

Scott K
0 new messages