Re: dnsblog query fails, dig succeeds

2010-09-19 Thread Sahil Tandon
On Sep 19, 2010, at 12:07 PM, Len Conrad wrote: > At 10:46 AM 9/19/2010, you wrote: >> On Sun, 2010-09-19 at 10:16:48 -0500, Len Conrad wrote: >> >> [ .. ] >> >>> so you're both saying that a dns query to the system resolver by >>> unprivileged postscreen gets different results than a query fro

Re: dnsblog query fails, dig succeeds

2010-09-19 Thread Len Conrad
At 10:46 AM 9/19/2010, you wrote: >On Sun, 2010-09-19 at 10:16:48 -0500, Len Conrad wrote: > >[ .. ] > >> so you're both saying that a dns query to the system resolver by >> unprivileged postscreen gets different results than a query from >> privileged dig? > >That is your straw man and misses the

Re: dnsblog query fails, dig succeeds

2010-09-19 Thread Sahil Tandon
On Sun, 2010-09-19 at 10:16:48 -0500, Len Conrad wrote: [ .. ] > so you're both saying that a dns query to the system resolver by > unprivileged postscreen gets different results than a query from > privileged dig? That is your straw man and misses the point. True or false: your command line te

Re: dnsblog query fails, dig succeeds

2010-09-19 Thread Len Conrad
I'm logged into the postscreen machine and su to root to work on postfix and run dig. > >>>Well that is your mistake. You must do the tests as an UNPRIVILEGED >>>user. Not root, not group wheel, none of that > >>It's a basic beginner mistake, but it's not my mistake, nor the >>problem.:) >

Re: dnsblog query fails, dig succeeds

2010-09-19 Thread Charles Marcus
On 9/19/2010 8:29 AM, Len Conrad wrote: I'm logged into the postscreen machine and su to root to work on postfix and run dig. Well that is your mistake. You must do the tests as an UNPRIVILEGED user. Not root, not group wheel, none of that It's a basic beginner mistake, but it's not my mist

Re: dnsblog query fails, dig succeeds

2010-09-19 Thread Len Conrad
>Len Conrad: >> >>> Did you use the same resolv.conf on the same host. >> >> >> >>Did you do the lookups as an UNPRIVILEGED user. >> >> >> >>You are giving zero details, so I have to start at the bottom. >> > >> >I'm logged into the postscreen machine and su to root to work on postfix >> >and run

Re: dnsblog query fails, dig succeeds

2010-09-19 Thread Wietse Venema
Len Conrad: > >> dns_query: 226.224.46.92.zen.rbldnsd.domain.net (A): Host not found > >> > >> but > >> > >> dig @zen.rbldnsd.domain.net 226.224.46.92.zen.rbldnsd.domain.net +short > >> 127.0.0.11 > > > >Did you use the same resolv.conf on the same host. Obviously you didn't because dig @zen.rb

Re: dnsblog query fails, dig succeeds

2010-09-19 Thread Wietse Venema
Len Conrad: > >>> Did you use the same resolv.conf on the same host. > >> > >>Did you do the lookups as an UNPRIVILEGED user. > >> > >>You are giving zero details, so I have to start at the bottom. > > > >I'm logged into the postscreen machine and su to root to work on postfix and > >run dig. We

Re: dnsblog query fails, dig succeeds

2010-09-18 Thread Len Conrad
>>Wietse Venema: >>> Len Conrad: >>> > postconf mail_version >>> > mail_version = 2.7-20091209 >>> > >>> > we run a copy of zen locally: >>> > >>> > process dnblog -v logs: >>> > >>> > dns_query: 226.224.46.92.zen.rbldnsd.domain.net (A): Host not found >>> > >>> > but >>> > >>> > dig @zen.rb

Re: dnsblog query fails, dig succeeds

2010-09-18 Thread Len Conrad
>Wietse Venema: >> Len Conrad: >> > postconf mail_version >> > mail_version = 2.7-20091209 >> > >> > we run a copy of zen locally: >> > >> > process dnblog -v logs: >> > >> > dns_query: 226.224.46.92.zen.rbldnsd.domain.net (A): Host not found >> > >> > but >> > >> > dig @zen.rbldnsd.domain.n

Re: dnsblog query fails, dig succeeds

2010-09-18 Thread Len Conrad
>Len Conrad: >> postconf mail_version >> mail_version = 2.7-20091209 >> >> we run a copy of zen locally: >> >> process dnblog -v logs: >> >> dns_query: 226.224.46.92.zen.rbldnsd.domain.net (A): Host not found >> >> but >> >> dig @zen.rbldnsd.domain.net 226.224.46.92.zen.rbldnsd.domain.net +s

Re: dnsblog query fails, dig succeeds

2010-09-18 Thread Wietse Venema
Wietse Venema: > Len Conrad: > > postconf mail_version > > mail_version = 2.7-20091209 > > > > we run a copy of zen locally: > > > > process dnblog -v logs: > > > > dns_query: 226.224.46.92.zen.rbldnsd.domain.net (A): Host not found > > > > but > > > > dig @zen.rbldnsd.domain.net 226.224.46.9

Re: dnsblog query fails, dig succeeds

2010-09-18 Thread Wietse Venema
Len Conrad: > postconf mail_version > mail_version = 2.7-20091209 > > we run a copy of zen locally: > > process dnblog -v logs: > > dns_query: 226.224.46.92.zen.rbldnsd.domain.net (A): Host not found > > but > > dig @zen.rbldnsd.domain.net 226.224.46.92.zen.rbldnsd.domain.net +short > 127.0.0