Milter-greylist

under freebsd4.8, milter-greylist 1.3.9

ureshii# named -v
named 8.3.4-REL Sat Jul 12 18:55:45 EDT 2003
        gdunn@...:/usr/obj/usr/src/usr.sbin/named

Is this sufficient? I saw a crash last night, but haven't been able to
reproduce it. The logs looked like:

Jun  8 21:06:42 ureshii milter-greylist: greylist: accept() returned
invalid soc ket (Result too large), try again
Jun  8 21:06:42 ureshii sm-mta[55507]: i5916gjg055507: Milter
(greylist): write( O) returned -1, expected 5: Broken pipe
Jun  8 21:06:42 ureshii sm-mta[55507]: i5916gjg055507: Milter
(greylist): to err or state
Jun  8 21:06:42 ureshii sm-mta[55507]: i5916gjg055507: Milter
(greylist): init f ailed to open
Jun  8 21:06:42 ureshii sm-mta[55507]: i5916gjg055507: Milter
(greylist): to err or state
Jun  8 21:06:43 ureshii sm-mta[55510]: i5916g1W055510:
milter_read(greylist): cm d read returned 0, expecting 5
Jun  8 21:06:43 ureshii milter-greylist: greylist: accept() returned
invalid soc ket (Result too large), try again
Jun  8 21:06:43 ureshii sm-mta[55510]: i5916g1W055510: Milter
(greylist): to err or state
Jun  8 21:06:43 ureshii sm-mta[55510]: i5916g1W055510: Milter
(greylist): init f ailed to open
Jun  8 21:06:43 ureshii sm-mta[55510]: i5916g1W055510: Milter
(greylist): to err or state

etc.

Graham

On Wed, Jun 09, 2004 at 10:25:44AM -0400, Graham Dunn wrote:
> under freebsd4.8, milter-greylist 1.3.9
> 
> ureshii# named -v
> named 8.3.4-REL Sat Jul 12 18:55:45 EDT 2003
>         gdunn@...:/usr/obj/usr/src/usr.sbin/named
> 
> Is this sufficient? I saw a crash last night, but haven't been able to
> reproduce it. The logs looked like:

The problem is not your named version, it's the resolver. For instance, 
NetBSD 1.6.2 has a BIND 8 named, but the resolver in libc is from BIND4.

Should you have any doubt, I advise you to build libspf_alt with libbind.a
from BIND9. Note that the problem is in libspf_alt. milter-greylist does not
do any name resolution on its own.

-- 
Emmanuel Dreyfus
manu@...

On Wed, Jun 09, 2004 at 02:30:34PM +0000, Emmanuel Dreyfus wrote:
> On Wed, Jun 09, 2004 at 10:25:44AM -0400, Graham Dunn wrote:
> > under freebsd4.8, milter-greylist 1.3.9
> > 
> > ureshii# named -v
> > named 8.3.4-REL Sat Jul 12 18:55:45 EDT 2003
> >         gdunn@...:/usr/obj/usr/src/usr.sbin/named
> > 
> > Is this sufficient? I saw a crash last night, but haven't been able to
> > reproduce it. The logs looked like:
> 
> The problem is not your named version, it's the resolver. For instance, 
> NetBSD 1.6.2 has a BIND 8 named, but the resolver in libc is from BIND4.
> 
> Should you have any doubt, I advise you to build libspf_alt with libbind.a
> from BIND9. Note that the problem is in libspf_alt. milter-greylist does not
> do any name resolution on its own.

Ah ok. I've built and installed BIND9, then rebuilt libspf_alt.

The only problem I'm seeing now is occasional timeouts:

Jun  9 16:41:02 ureshii sm-mta[78071]: i59KeqEx078071: Milter
(greylist): timeout before data read

My guess is the spf record lookup is timing out ?

I supposed I should run a caching server on this machine.

Graham