Am Montag, den 13.04.2020, 06:57 -0400 schrieb Viktor Dukhovni: > > On Apr 13, 2020, at 6:38 AM, Christian <list-christ...@web.de> wrote: > > Nevertheless, it should probably be included in the Postfix DANE > documentation to avoid muslc setups with postfix for now. > > Postfix expects a C-library implementation of the DNS stub resolver > routines that is compatible with the original BSD design. > > It don't think it is reasonable to curate a list of defective > C-library resolver implementations. > > Unless Wietse some day throws in the towel and makes libunbound > or libldns a required dependency for Postfix, we're stuck with > the traditional libresolv interface, and it needs to have a > reasonably complete implementation on your system. > > As I already mentioned, even without DANE, musl-libc already > fails to provide adequate controls to disable the search > list (RES_DEFNAMES and RES_DNSRCH). > > DO NOT run Postfix over musl-libc. >
I agree and will not do so anymore. Just thinking about the popularity of container setups with Alpine and the fact, that this setup runs quite well if you are not digging into it like we did in the last days. And as said, most E-Mail server test websites only check incoming DANE. Hence trying to prevent a spread of this. FYI: I put your findings forward to the musl-libc mailing list and asked what they now think what should be done.
