Re: [client] did not issue MAIL/EXPN/VRFY/ETRN during connection

Claus Aßmann wrote:

Do you get any mail from them or does this always happen?

From Proofpoint I used to get, but they began consistently failing in the past 2-3 weeks. From Cisco, it is a hit or miss. From a few other providers, we only recently started doing business with them, so never found in my log archives (went back to about 2y of past logs to confirm).

define(`confTO_COMMAND', `1m')dnl

Why did you choose this?

I believe this was recommendation from a 3rd party.

Kcheck_client dns -R a -T T -q

Where/how is this used?

It came as part of DNSBL setup, but judging by your reaction, seems not required, and I'm more than happy to clear it out. Less is more (except timeout, it seems).

Apr 26 13:16:01 mxhost sm-mta[126129]: NOQUEUE: connect from
mx0a-0017d901.pphosted.com [208.84.65.218]

Apr 26 13:17:01 mxhost sm-mta[126129]: 43QHG1xY126129: timeout waiting
for input from mx0a-0017d901.pphosted.com during server cmd read

Maybe 1m is too short, esp. if DNS lookups take a while.
The default is much longer - see the docs.

It is interesting that these timeout changes occurred over a year ago. I can see a DNS query and response for these incoming systems happening in under 2 seconds. Will change those back to their default and see how it behaves. More to come.