[Rspamd-Users] Repeated ' temporary DNS error ' on first attempt at SPF lookup for a domain

[That Linux Gal]

I'm trying to set up rspamd, and before I roll it out to my users, I want to make sure it actually functions properly. I installed unbound specifically so rspamd has a local recursive resolving nameserver.

No matter what I try, rspamd often returns "temporary DNS error" on the first time it tries to do an SPF lookup for a given domain. While testing it via "rspamadm dnstool spf -d DOMAINNAME", it will often respond within a split second with "temporary DNS error". Then if I try it again a moment later, it works.

user at host:~# sudo rspamadm dnstool spf -d gogo.com
Cannot get SPF record: temporary DNS error

user at host:~# sudo rspamadm dnstool spf -d gogo.com # 5 seconds later
Cannot get SPF record: no SPF record

Here's my /etc/rspamd/local.d/options.inc

dns {
nameserver = ["127.0.0.1:5353"];
timeout = 30s;
retransmits = 5;
}

Note that port 5353 is my local running copy of Unbound.

However, I experience the same symptoms when I change 5353 to 53 (my local running copy of BIND). Or both (first 5353, then 53).

I've tried tweaking timeout=, retransmits=, dns_max_requests=, sockets=, etc., all to no avail.
Tearing my hair out over here. Any help very much appreciated.