>>>>I'm logged into the postscreen machine and su to root to work on >>>>postfix and run dig. > >>>Well that is your mistake. You must do the tests as an UNPRIVILEGED >>>user. Not root, not group wheel, none of that > >>It's a basic beginner mistake, but it's not my mistake, nor the >>problem.:) > >It may not have been *the* problem, but if you did su to root to run the tests >- as you plainly stated - then it was indeed *a* problem, and a big beginner >mistake which rendered your troubleshooting efforts totally unreliable.
so you're both saying that a dns query to the system resolver by unprivileged postscreen gets different results than a query from privileged dig? Len
