On Mon, Jul 13, 2009 at 08:28:16AM -0400, Wietse Venema wrote:
> Keld Jørn Simonsen:
> [ Charset ISO-8859-1 unsupported, converting... ]
> > On Mon, Jul 13, 2009 at 07:18:03AM -0400, Wietse Venema wrote:
> > > Keld J?rn Simonsen:
> > > > 450 indicates a temporary dns error, and I have set
> > > > unknown_address_reject_code = 550
> > > 
> > > unknown_address_reject_code is for permanent errors.
> > > 
> > > In your case, the system library getnameinfo() returns a
> > > temporary error, therefore Postfix will reply with 450.
> > > 
> > > Since you also can't look up the name for my own server 168.100.189.2,
> > > I suspect one or more of the following:
> > > 
> > > - Incorrect system permissions of / /etc /etc/resolv.conf
> > >   /etc/nsswitch.conf or the files and directories referenced by
> > >   /etc/nsswitch.conf.
> > > 
> > >   Files must be world readable, and directories must have world
> > >   read-execute permission.
> > 
> > They look ok.
> 
> If you are not willing to show the evidence, then we cannot
> help you find the mistake.

Sorry, I am new on this list and not fully aware of your conventions.
So here they are:

drwxr-xr-x  20 root root  4096 jul 10 09:32 /
drwxr-xr-x 113 root root 12288 jul 13 14:09 /etc
-rw-r--r--   2 root root  1277 jun 24  2007 /etc/nsswitch.conf
-rw-r--r--   1 root root    47 jul 13 14:09 /etc/resolv.conf



> > And postfix does get answers from named. I receive all my
> > mail via my local postfix, and I could not have done this email without 
> > postfix/named working - which it does most of the time.
> 
> Postfix does not need named to RECEIVE email.

I think postfix does need DNS assistance to check a number of thins.
I understand that I don't need to run named on my own machine, as I just
could use any nameserver, but running named here gives me greater
control, and I can poke into logs etc.
> 
> > > - Running Postfix chrooted without providing the necessary files
> > >   in the chroot jail.
> > 
> > Postfix is not chrooted.
> 
> If you are not willing to show the evidence, then we cannot
> help you find the mistake.

OK,  here are the relevant lines of master.cf. I adderd the -v option to
get more debugging. Still it does not show me communication with the
name server. The name server log does show some communication, that
stems from postfix, but it does not show me the responses. I would like
to see what named tells postfix.

# ==========================================================================
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
# ==========================================================================
smtp    inet    n       -       y       -       -       smtpd -v


best regards
keld

Reply via email to