1

I have a snow-leopard os-x Server configuration running postfix with no local firewall on the X-Serve.

When a client attempts to connect to the SMTP port the connection takes about 15 seconds to accept the connection and get the smtp id string back.

Does anybody have any idea what the delay could be.

telnet smtpserver 25 takes 15 seconds externally

telnet localhost 25 is almost immediate

Using tcpdump on incoming firewall (separate host) and smtp server for the port shows that the connection is being passed through almost immediately but the response is very slow in coming back.

Thanks for the support.

  • where is smtpserver defined - the name lookup for this would seem to be the most likely issue – user151019 Dec 13 '11 at 11:37
  • smtpserver is a generic name. The real host name is used when I do the test. The dns resolution is not an issue here. You could substitute the ip address for exactly the same result. – sweetfa Dec 14 '11 at 0:39
3

The Delay is due to postfix doing a reverse lookup on the client IP and doing another lookup on that result to see if they get back to the IP.

if you are using a consumer connection to the internet most likely the first test will pass. but the second test will cause the problem.

you can verify this on the server itself.

nslookup <your client IP>

returns something like 80-41-90-213.dsl.iwx.uk.net

but on reversing that

nslookup 80-41-90-213.dsl.iwx.uk.net 

you will probably get SERVFAIL after a delay.

it is that delay that is showing up when you connect to the server. To find out which one go through each server in /etc/resolve.conf

nameserver x.x.x.x
nameserver y.y.y.y
nameserver z.z.z.z

test them with

nslookup 80-41-90-213.dsl.iwx.uk.net x.x.x.x

One or more will show a delay before they come back to the command prompt.

Once you've found which DNS causes the big SERVFAIL delay, replace it with another. i.e. Googles 8.8.8.8 and 8.8.4.4 currently return relatively quickly.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .