Viktor Dukhovni wrote: > On Mon, Sep 16, 2019 at 01:44:38PM +0200, Helmut Schneider wrote: > > > Where can I change the DSN to 4xx and ensure that mails are > > delivered when the tunnel is up again? > > Normally, if a tunnel goes down, DNS lookups that require access > to a server on the far side of the tunnel tempfail, and Postfix > would automatically return 4XX. If your system returns hard errors > when the network is partly down, then that's a configuration defect > with the system.
Well, I add / remove internal DNS entries on OpenVPN start / stop. But I also have other (public) DNS servers in /etc/resolv.conf. And when the internal ones are not available there is no tempfail because the public servers reply with NXDOMAIN. I might be wrong but I see no "defect" here. smtp_delivery_status_filter does what I need.
