Cyrus trying to resolve lan ip

J.A.J. van Belkum aukjan at gfo.nl
Thu Oct 24 09:46:11 EDT 2002


Hi y'all,

I am running cyrus on a RH7.1 box icw Postfix and MySQL.  All of a 
sudden two of my servers, at different sites started showing  slow 
reaction times (exacly 20 seconds).  They are both connected through the 
same provider.... So I grabbed my tcpdump and started searching.... now 
I got the following dump:

15:14:04.754162 eth1 < 192.168.0.50.1445 > 192.168.0.254.imap: S 18257605:18257605(0) win 8192 <mss 1460,nop,nop,sackOK> (DF)
15:14:04.754288 eth1 > 192.168.0.254.imap > 192.168.0.50.1445: S 3874304414:3874304414(0) ack 18257606 win 5840 <mss 1460,nop,nop,sackOK> (DF)
15:14:04.754692 eth1 < 192.168.0.50.1445 > 192.168.0.254.imap: . 1:1(0) ack 1 win 8760 (DF)
15:14:04.769740 eth0 > 62.177.161.90.2908 > 213.197.28.3.domain: 50561+ PTR? 50.0.168.192.in-addr.arpa. (43) (DF) [tos 0x8] 
15:14:09.775391 eth0 > 62.177.161.90.2910 > 213.197.30.28.domain: 50561+ PTR? 50.0.168.192.in-addr.arpa. (43) (DF) [tos 0x8] 
15:14:12.295410 eth0 > 62.177.161.90.2911 > 213.197.30.28.domain: 7750+ PTR? 50.0.168.192.in-addr.arpa. (43) (DF) [tos 0x8] 
15:14:14.785303 eth0 > 62.177.161.90.2908 > 213.197.28.3.domain: 50561+ PTR? 50.0.168.192.in-addr.arpa. (43) (DF) [tos 0x8] 
15:14:17.305325 eth0 > 62.177.161.90.2909 > 213.197.28.3.domain: 7750+ PTR? 50.0.168.192.in-addr.arpa. (43) (DF) [tos 0x8] 
15:14:19.795301 eth0 > 62.177.161.90.2910 > 213.197.30.28.domain: 50561+ PTR? 50.0.168.192.in-addr.arpa. (43) (DF) [tos 0x8] 
15:14:22.315379 eth0 > 62.177.161.90.2911 > 213.197.30.28.domain: 7750+ PTR? 50.0.168.192.in-addr.arpa. (43) (DF) [tos 0x8]
15:14:24.806469 eth1 > 192.168.0.254.imap > 192.168.0.50.1445: P 1:55(54) ack 1 win 5840 (DF)
15:14:24.807308 eth1 < 192.168.0.50.1445 > 192.168.0.254.imap: P 1:18(17) ack 55 win 8706 (DF)
15:14:24.807411 eth1 > 192.168.0.254.imap > 192.168.0.50.1445: . 55:55(0) ack 18 win 5840 (DF)
15:14:24.807611 eth1 > 192.168.0.254.imap > 192.168.0.50.1445: P 55:243(188) ack 18 win 5840 (DF)
15:14:24.809131 eth1 < 192.168.0.50.1445 > 192.168.0.254.imap: P 18:46(28) ack 243 win 8518 (DF)
15:14:24.813409 eth1 > 192.168.0.254.imap > 192.168.0.50.1445: P 243:267(24) ack 46 win 5840 (DF)
15:14:24.815208 eth1 < 192.168.0.50.1445 > 192.168.0.254.imap: P 46:57(11) ack 267 win 8494 (DF)
15:14:24.815498 eth1 > 192.168.0.254.imap > 192.168.0.50.1445: P 267:279(12) ack 57 win 5840 (DF)
15:14:24.816289 eth1 < 192.168.0.50.1445 > 192.168.0.254.imap: P 57:63(6) ack 279 win 8482 (DF)
15:14:24.816460 eth1 > 192.168.0.254.imap > 192.168.0.50.1445: P 279:298(19) ack 63 win 5840 (DF)
15:14:24.817207 eth1 < 192.168.0.50.1445 > 192.168.0.254.imap: P 63:84(21) ack 298 win 8463 (DF)



It looks like cyrus is trying to resolve the internal IP address... 
which it shouldn't do.  This probabely points to a change in the Network 
of the provider, now that they both take 20 seconds to get answers... 
 Before yesterday they were running just fine, but now I do not want the 
servers to check the DNS records.... How can I do this, or might this be 
some other problem???


bash$ route   
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
62.177.161.88   0.0.0.0         255.255.255.252 U     0      0        0 eth0
192.168.0.0     0.0.0.0         255.255.255.0   U     0      0        0 eth1
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
0.0.0.0         62.177.161.89   0.0.0.0         UG    0      0        0 eth0


Any suggestions are Welcome!!

Thanks,

    Aukjan van Belkum







More information about the Info-cyrus mailing list