Debian Bug report logs - #718547
postfix-policyd-spf-python: policyd-spf times out when one of DNS servers in resolv.conf (not the first) is down

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Pavel Volkov <capt-obvious@yandex.ru>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: postfix-policyd-spf-python: policyd-spf times out when one of DNS servers in resolv.conf (not the first) is down

Date: Fri, 02 Aug 2013 10:18:19 +0400

Package: postfix-policyd-spf-python
Version: 1.0-2
Severity: normal

Dear Maintainer,

I call policyd-spf-python from Postfix.
I have 3 DNS servers in resolv.conf. The only options in resolv.conf are "nameserver" (3 of them) and "domain" (1).
There's no rotate option.
The last DNS server is currently down, the first two are operating and answering.
On incoming email the mail.log throws Temperror and says:

Aug  2 07:47:23 luna postfix/spawn[3525]: warning: command /usr/bin/policyd-spf exit status 1
Aug  2 07:47:44 luna postfix/smtpd[3520]: warning: problem talking to server private/policy-spf: Connection timed out

Or:

Aug  2 07:49:04 luna policyd-spf[3528]: Traceback (most recent call last):
Aug  2 07:49:04 luna postfix/spawn[3527]: warning: command /usr/bin/policyd-spf exit status 1

If I delete the last nameserver, everything operates well.


-- System Information:
Debian Release: 7.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages postfix-policyd-spf-python depends on:
ii  adduser     3.113+nmu3
ii  postfix     2.9.6-2
ii  python      2.7.3-4
ii  python-spf  2.0.7-3
ii  python2.7   2.7.3-6

postfix-policyd-spf-python recommends no packages.

Versions of packages postfix-policyd-spf-python suggests:
ii  python-authres  0.402-1

-- Configuration Files:
/etc/postfix-policyd-spf-python/policyd-spf.conf changed:
debugLevel = 1 
defaultSeedOnly = 1
HELO_reject = SPF_Not_Pass
Mail_From_reject = Fail
PermError_reject = False
TempError_Defer = False
skip_addresses = 127.0.0.0/8,::ffff:127.0.0.0//104,::1//128
Domain_Whitelist = yandex.net,yandex.ru,google.com,junkemailfilter.com


-- no debconf information

Message #18 received at 718547@bugs.debian.org (full text, mbox, reply):

From: Scott Kitterman <debian@kitterman.com>

To: Pavel Volkov <capt-obvious@yandex.ru>

Cc: 718547@bugs.debian.org

Subject: Re: postfix-policyd-spf-python: policyd-spf times out when one of DNS servers in resolv.conf (not the first) is down

Date: Tue, 06 Aug 2013 02:09:58 -0400

[Message part 1 (text/plain, inline)]

On Friday, August 02, 2013 10:18:19 Pavel Volkov wrote:
> Package: postfix-policyd-spf-python
> Version: 1.0-2
> Severity: normal
> 
> Dear Maintainer,
> 
> I call policyd-spf-python from Postfix.
> I have 3 DNS servers in resolv.conf. The only options in resolv.conf are
> "nameserver" (3 of them) and "domain" (1). There's no rotate option.
> The last DNS server is currently down, the first two are operating and
> answering. On incoming email the mail.log throws Temperror and says:

What happens if you patch /usr/share/pyshared/DNS/Base.py with the attached 
patch?

Scott K

[python-dns.timeout_patch (text/x-patch, attachment)]

Message #23 received at 718547@bugs.debian.org (full text, mbox, reply):

From: Pavel Volkov <capt-obvious@yandex.ru>

To: Scott Kitterman <debian@kitterman.com>

Cc: 718547@bugs.debian.org

Subject: Re: postfix-policyd-spf-python: policyd-spf times out when one of DNS servers in resolv.conf (not the first) is down

Date: Tue, 06 Aug 2013 19:37:56 +0400

On Tuesday 06 August 2013 02:09:58 Scott Kitterman wrote:
> What happens if you patch /usr/share/pyshared/DNS/Base.py with the attached
> patch?

With the patch mail is delivered, no errors are logged.

Message #28 received at 718547@bugs.debian.org (full text, mbox, reply):

From: Scott Kitterman <debian@kitterman.com>

To: Pavel Volkov <capt-obvious@yandex.ru>,718547@bugs.debian.org,Pavel Volkov <capt-obvious@yandex.ru>

Subject: Re: Bug#718547: postfix-policyd-spf-python: policyd-spf times out when one of DNS servers in resolv.conf (not the first) is down

Date: Tue, 06 Aug 2013 12:31:09 -0400

Pavel Volkov <capt-obvious@yandex.ru> wrote:
>On Tuesday 06 August 2013 02:09:58 Scott Kitterman wrote:
>> What happens if you patch /usr/share/pyshared/DNS/Base.py with the
>attached
>> patch?
>
>With the patch mail is delivered, no errors are logged.

Thanks. I've sent the patch to the upstream maintainer for review. 

Scott K

Message #35 received at 718547-close@bugs.debian.org (full text, mbox, reply):

From: Scott Kitterman <scott@kitterman.com>

To: 718547-close@bugs.debian.org

Subject: Bug#718547: fixed in python-dns 2.3.6-2

Date: Wed, 07 Aug 2013 03:34:28 +0000

Source: python-dns
Source-Version: 2.3.6-2

We believe that the bug you reported is fixed in the latest version of
python-dns, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 718547@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Scott Kitterman <scott@kitterman.com> (supplier of updated python-dns package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Tue, 06 Aug 2013 23:09:05 -0400
Source: python-dns
Binary: python-dns
Architecture: source all
Version: 2.3.6-2
Distribution: unstable
Urgency: low
Maintainer: Scott Kitterman <scott@kitterman.com>
Changed-By: Scott Kitterman <scott@kitterman.com>
Description: 
 python-dns - DNS client module for Python
Closes: 718547
Changes: 
 python-dns (2.3.6-2) unstable; urgency=low
 .
   [ Jakub Wilk ]
   * Use canonical URIs for Vcs-* fields.
   * Fix a typo in README.source.
 .
   [ Scott Kitterman ]
   * Add debian/patches/pydns_timeout.patch to fix timeouts associated with
     only one of several available nameservers being unavailable
     (Closes: #718547):
     - Only raise timeout error after trying all available servers
     - Stop lookups once an answer is gotten
   * Bump compat to 8 and debhelper build-dep to 8.1 for build-arch/indep
     support
   * Bump standards version to 3.9.4 without further change
Checksums-Sha1: 
 9425e0cca7f9e3507aea4debf59c4960ad7822cf 1358 python-dns_2.3.6-2.dsc
 9ef77877122d544ea41c321107e56789b23a4683 7906 python-dns_2.3.6-2.diff.gz
 299518d6b4ebb5fa23ce06e581ce0297964b858a 28530 python-dns_2.3.6-2_all.deb
Checksums-Sha256: 
 1be59b73f6cc4eba262c4ddc734d58740fdb7e8956e927020b05c90400029abc 1358 python-dns_2.3.6-2.dsc
 7b37f08b42cc9e414bbf5fc0d94f9c75789b298d708094d67251b48feb6dc028 7906 python-dns_2.3.6-2.diff.gz
 6f6d8703be88d7322760b3f464fd39fbc6dabe128c972370ffcb66e2efaa1e64 28530 python-dns_2.3.6-2_all.deb
Files: 
 28a9471fa7012795d928f9a974a93fbf 1358 python optional python-dns_2.3.6-2.dsc
 74c90426c4fa88b609cea586bb681a17 7906 python optional python-dns_2.3.6-2.diff.gz
 af5a684980a3617de310789a15824191 28530 python optional python-dns_2.3.6-2_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlIBvh8ACgkQHajaM93NaGovnQCfcSZ86ki/zNlu7sre3qA6xKaV
FAAAn0BZgtf+9LTScu1oc3qEslsqYrYr
=iy1x
-----END PGP SIGNATURE-----

Message #40 received at 718547-close@bugs.debian.org (full text, mbox, reply):

From: Scott Kitterman <scott@kitterman.com>

To: 718547-close@bugs.debian.org

Subject: Bug#718547: fixed in python-dns 2.3.6-1+deb7u1

Date: Sat, 10 Aug 2013 15:47:05 +0000

Source: python-dns
Source-Version: 2.3.6-1+deb7u1

We believe that the bug you reported is fixed in the latest version of
python-dns, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 718547@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Scott Kitterman <scott@kitterman.com> (supplier of updated python-dns package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Tue, 06 Aug 2013 23:30:26 -0400
Source: python-dns
Binary: python-dns
Architecture: source all
Version: 2.3.6-1+deb7u1
Distribution: stable
Urgency: low
Maintainer: Scott Kitterman <scott@kitterman.com>
Changed-By: Scott Kitterman <scott@kitterman.com>
Description: 
 python-dns - DNS client module for Python
Closes: 718547
Changes: 
 python-dns (2.3.6-1+deb7u1) stable; urgency=low
 .
   * Add debian/patches/pydns_timeout.patch to fix timeouts associated with
      only one of several available nameservers being unavailable
      (Closes: #718547):
      - Only raise timeout error after trying all available servers
      - Stop lookups once an answer is gotten
Checksums-Sha1: 
 b4edf77e3fd261e608cf64bb2daa41234b0c533d 1381 python-dns_2.3.6-1+deb7u1.dsc
 de250c743c6604b910bc67c3a4eea5664b81e9fa 7794 python-dns_2.3.6-1+deb7u1.diff.gz
 7f50cac67e21cc81ba7a9b9f67e5a9fb36e90933 31796 python-dns_2.3.6-1+deb7u1_all.deb
Checksums-Sha256: 
 9c990f2af1701a3f375d196ad28b841fa79e69a98505c75e0f5232b038c253a3 1381 python-dns_2.3.6-1+deb7u1.dsc
 b084b70e9e99282552d7bd61c44b2f0e4d0d07b853d926f0b5c4e12419c6c33f 7794 python-dns_2.3.6-1+deb7u1.diff.gz
 38e9f647b12af894f574f6cd98460341d9c15b2f954fb0a3c2cf613f96ecd833 31796 python-dns_2.3.6-1+deb7u1_all.deb
Files: 
 71d45e4baa9aad07efbbd319900d6b05 1381 python optional python-dns_2.3.6-1+deb7u1.dsc
 a016b3ee58abeb2ae914afafabfe909a 7794 python optional python-dns_2.3.6-1+deb7u1.diff.gz
 26ce9383b7ee4b8c205885a73295fabc 31796 python optional python-dns_2.3.6-1+deb7u1_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlICmr8ACgkQHajaM93NaGpNzwCfQIjljeiq8lEspcI36RnUIlmW
E9UAnicRz9QIYYQ2SgZrOmV7SwMAzSUk
=pfKm
-----END PGP SIGNATURE-----

Message #45 received at 718547@bugs.debian.org (full text, mbox, reply):

From: Martin Lucina <martin@lucina.net>

To: 718547@bugs.debian.org

Subject: Can we get this fix into a point release of wheezy?

Date: Sun, 1 Sep 2013 21:29:50 +0200

Hi,

can we get this patch into a point release of wheezy?

I just upgraded a system running postfix-policyd-spf-python and ran into
the same problem. The patch in this bug fixes the problem for me, but it
would be nice if it could be pushed into the next point release of wheezy.

Thanks,

Martin

Message #50 received at 718547@bugs.debian.org (full text, mbox, reply):

From: Scott Kitterman <debian@kitterman.com>

To: Martin Lucina <martin@lucina.net>,718547@bugs.debian.org

Subject: Re: Bug#718547: Can we get this fix into a point release of wheezy?

Date: Sun, 01 Sep 2013 15:49:10 -0400

It's already uploaded for wheezy and will be in the next point release. 

Scott K

Send a report that this bug log contains spam.