RE: Test of opendkim-2.3.1 on a busy e-mail server

From: Murray S. Kucherawy <msk_at_cloudmark.com>
Date: Mon, 11 Apr 2011 16:23:03 -0700

> -----Original Message-----
> From: opendkim-dev-bounce_at_lists.opendkim.org [mailto:opendkim-dev-bounce_at_lists.opendkim.org] On Behalf Of SM
> Sent: Monday, April 11, 2011 4:04 PM
> To: Gary Mills
> Cc: opendkim-dev_at_lists.opendkim.org
> Subject: Re: Test of opendkim-2.3.1 on a busy e-mail server

Thanks, Gary, for the detailed testing and report. This is looking pretty good.

SM covered some of the cases reported. Here are some comments on the others:

> > Apr 9 19:53:15 electra opendkim[16259]: [ID 467235 mail.error]
> > p3A0qbIY006123: key retrieval failed (s=1000073432,
> > d=auth.ccsend.com): '1000073432._domainkey.auth.ccsend.com' query
> timed out
>
> 1000073432._domainkey.auth.ccsend.com. 7200 IN TXT "k=rsa\;
> p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCPQbUA/GI9q/nSI59sTfgzf8ZFlgdOK
> Z8IPOmPEUhgbAeqgv02OMiH4WEV5sOXURfUdD+CJ4usxumlo7"
> "tseSr3Zvpr98XjDjGnaA4NTG4iRmk7cedcYvv2fbU4iXACS6YI08suYiOuB5ITTi8LTrHH
> r/tnTia8se7AO+w3b2KvmQIDAQAB"

"timed out" pretty much explains it. I get an immediate reply, however. Could've been some transient delay if you don't see a lot of these.

> > Apr 9 17:08:12 electra opendkim[16259]: [ID 184845 mail.error]
> > p39M1OTW016852: Authentication-Results header add failed
>
> This one is odd.

This typically means that, during the end-of-message phase of milter, the MTA gave up waiting for the filter to say something and closed the connection; eventually the filter did have something to say, but the socket joining them had been closed by then. It certainly should be unusual. It should also be the case that progress messages from the filter should keep the read timeout from hitting, but there's a second EOM timeout that can't be avoided, though that's pretty long by default (a full minute?).

-MSK
Received on Mon Apr 11 2011 - 23:23:11 PST