On Tue, 22 Jul 2008, Mike Markley wrote:

On Mon, Jul 21, 2008 at 06:08:53PM -0700, Richard A Nelson <[EMAIL PROTECTED]> 
wrote:
Yes, and I'm leaning heavily in that direction - depending upon the
vagaries of MTA queueing/coattailing/pipelining is problematic at best.

This could windup being a DDOS against MTAs (both receiving and sending)

Does starting the filter with -Cdnserror=accept help this issue?

Sadly, no - and I think that is to be expected since the DNS request
actually worked - it just got bum data.   That sent me back to the fine
manual pages and I tried -Cinternal=accept which seemed more apropos.

Unfortunately, that too fails...

# ps auxw | grep dk-filter
133      21476  0.0  0.0  58128  1552 ?        Ssl  01:24   0:12
/usr/bin/dk-filter -u dk-filter -P /var/run/dk-filter/dk-filter.pid -p
/var/run/dk-filter/dk-filter.sock -R -l -b sv -c nofws -h -H -i
/etc/mail/dkim.localhosts -o return-path received comments keywords bcc
resent-bcc dkim-signature x-domainkeys x-spf-record x-scanned-by
x-spam-score x-greylist -d cavein.org -D -s /etc/mail/dk.private -S 2008
-Cdnserror=accept,internal=accept

# grep dk_eom /var/log/mail.log
Jul 23 17:52:55 ultima-thule dk-filter[21476]: m6NHqtXn011780: dk_eom():
resource unavailable: d2i_PUBKEY_bio() failed

Which corresponds to this message:
---------------------------------------------------------------------------
X-DKIM: Sendmail DKIM Filter v2.6.0 smtp.cavein.org m6NHqtXn011780
Return-Path:
    <[EMAIL PROTECTED]
    >
Received: from vger.kernel.org (vger.kernel.org [209.132.176.167])
    by ultima-thule.cavein.org (8.14.3/8.14.3/Debian-5) with ESMTP id
    m6NHqtXn011780
    for <[EMAIL PROTECTED]>; Wed, 23 Jul 2008 17:52:55 GMT
Received: ([EMAIL PROTECTED]) by vger.kernel.org via listexpand
    id S1752768AbYGWRwy (ORCPT <rfc822;[EMAIL PROTECTED]>);
    Wed, 23 Jul 2008 13:52:54 -0400
Received: ([EMAIL PROTECTED]) by vger.kernel.org id
S1753101AbYGWRwn
    (ORCPT <rfc822;linux-kernel-outgoing>);
    Wed, 23 Jul 2008 13:52:43 -0400
Received: from outbound-mail-36.bluehost.com ([69.89.20.190]:52231 "HELO
    outbound-mail-36.bluehost.com" rhost-flags-OK-OK-OK-OK)
    by vger.kernel.org with SMTP id S1752823AbYGWRwm (ORCPT
    <rfc822;[EMAIL PROTECTED]>);
    Wed, 23 Jul 2008 13:52:42 -0400
Received: (qmail 10648 invoked by uid 0); 23 Jul 2008 17:52:39 -0000
Received: from unknown (HELO box128.bluehost.com) (69.89.22.128)
  by outboundproxy2.bluehost.com with SMTP; 23 Jul 2008 17:52:39 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default;
    d=virtuousgeek.org;
    h=Received:From:To:Subject:Date:User-Agent:Cc:References:In-Reply-To:MIM
    E-Version:Content-Type:Content-Transfer-Encoding:Content-Disposition:Mes
    sage-Id:X-Identified-User;
    b=B1yvQg4rSg6WUWfKc7kGW/idR5rKuuZl//roc9tjMp4e2T5m2TJl2kogNeHRj4Baon1PEp
    VGoIBXaYIFeWoxwRjMSPbKv2I/Ha9rCNm4kEmqtVlh/b/Kmor+My4nXL2v;
Received: from [75.111.27.49] (helo=hobbes.lan)
    by box128.bluehost.com with esmtpsa (TLSv1:AES256-SHA:256)
    (Exim 4.69)
    (envelope-from <[EMAIL PROTECTED]>)
    id 1KLiVy-0007ea-QE; Wed, 23 Jul 2008 11:52:39 -0600
From: Jesse Barnes <[EMAIL PROTECTED]>
...
----------------------------------------------------------------------------


--
Rick Nelson
"So, will the Andover party have a cash bar?"
"No, there's free beer."
"Uh-oh, Stallman's gonna be pissed..."
                -- overheard at the Bazaar, 1999



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to