Hello 'list';
This is my first time out in 'list' land so please don't flame me if I
get the format wrong. Coaching and constructive criticism is fine ;-)
{usenet group seems to be almost dead ?}

I've recently noticed that my Postfix is being a naughty bunny. It is
attempting to query my ISP nameserver to reverse resolve LAN addresses
defined in my_networks.

The queries look like this;
19-May-2009 7:26:56.489 client <wan_ip>#12345: query:
60.1.168.192.in-addr.arpa IN PTR +

Which in turn gives this;
security: warning: client <wan_ip>#12345: RFC 1918 response from
Internet for 60.1.168.192.in-addr.arpa

I've isolated it to Postfix and a telnet test to it from any machine in
'mynetworks' causes it to perform the reverse lookup for an internal IP.

My suspicion is that I have not configured it as it should be. It still
needs to do PTR lookups for hosts (I don't want to kill the whole
feature), but skip them for anything defined in my_networks.

I have tried the various 'permit my_networks' in the client restriction
(and other places) and I simply cannot get Postfix to stop performing
these queries.

Anyone know what I am missing? Happy to RTM but I'm tending to find it
is verbose, but all over the place.

mail_version = 2.5.5

Steve

Reply via email to