Re: [AMaViS-user] SA suddenly takes AGES...

Hi Gary

Gary V wrote the following on 26.10.2006 15:09:
>> * Tobias Reckhard <tobias.reckhard@secunet.com>:
>
>>> How long did you use it, Gary? ...

> Probably 6 months to a year. I only installed dnscache and ucspi-tcp,
> I did not install tinydns, so that is probably where I went wrong.

Well, I did _install_ the full djbdns (not just dnscache and tinydns),
daemontools and ucspi-tcp _packages_. I have setup (that's probably a
better word than install here) tinydns & axfrdns, dnscache and walldns.
I've even had a stab at rbldns, but haven't had a good use for it yet.

If all you want to run is a caching DNS resolving server, you typically
need to _install_ djbdns and daemontools and setup only dnscache.
ucspi-tcp is needed to run axfrdns and axfr-get, which you only need if
you wish to operate an authoritative DNS content server. However, it
doesn't hurt to install ucspi-tcp as well.

Did you use daemontools to run the DJB daemons (from /etc/inittab) or
some rc.d-type adaptation? djbdns runs very smoothly if you follow Dan's
installation instructions on http://cr.yp.to/djbdns/install.html. I use
the Debian packages myself, but these stick very closely to Dan's design
if you create them with the right options. I wouldn't be surprised to
run into problems by choosing an rc.d-type startup approach without
making sure I knew exactly that I was doing everything 100% right.

> I don't doubt I did a poor job of setting it up. I noticed an increase
> in spam due to slow response in network tests, and at times I could not
> even resolve Yahoo.com.

Well, without any hard data we can only speculate on what the problem
was. However, once you know the few knobs dnscache offers, it is
remarkably easy to setup. It's rather simple, which means that it's
quick to get up and running correctly and less easy to screw up than
some of the more complex an hence complicated alternatives.
It also means that some things can't be done with one instance of
dnscache alone, but by chaining them and throwing in an odd tinydns and
walldns here and there you can efficiently (IMHO) provide solutions that
cater for practically all real-world needs -- the sensible ones, that
is, there's always people who try to use their monkey wrench for everything.

Cheers,
Tobias

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=...057&dat=121642
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/