Re: postfix and dns lookup

2011-02-05 Thread Benny Pedersen
On Fri, 04 Feb 2011 08:44:39 -0600, Noel Jones wrote: > At least set up a local caching resolver with 8.8.8.8 as the > forwarder. in case of bind this is bad to use any forwarder since it disables hint zone, forwarders is more usefull pr zone, so keeep forwards out of options containter in name

Re: postfix and dns lookup

2011-02-05 Thread Reindl Harald
Am 05.02.2011 12:37, schrieb Benny Pedersen: > On Fri, 04 Feb 2011 08:44:39 -0600, Noel Jones > wrote: > >> At least set up a local caching resolver with 8.8.8.8 as the >> forwarder. > > in case of bind this is bad to use any forwarder since it disables hint > zone, forwarders is more usefull

Re: Question about: postfix/smtpd[ ]: connect from unknown[unknown]

2011-02-05 Thread Jerry
On Sat, 05 Feb 2011 01:41:35 +0100 mouss articulated: > Le 05/02/2011 00:34, Joe a écrit : > > On 02/04/2011 03:13 PM, mouss wrote: > >> Le 04/02/2011 20:42, Joe a écrit : > >>> I always try to work with the package management system to keep > >>> things sane and manageable if possible. postfix-2

Re: postfix and dns lookup

2011-02-05 Thread Matteo Cazzador
hello, the nature of the problem that causes temporary lookup failure is not dns like i thinking of, the problem is caused by mysql backend. Some spam has strange charset that caused mysql error, see previous mail about it. Thank's a lot. Il 05/02/2011 13:55, Reindl Harald ha scritto: Am 05.0

Re: postfix and dns lookup

2011-02-05 Thread Charles Marcus
On 2/5/2011 7:55 AM, Reindl Harald wrote: Am 05.02.2011 12:37, schrieb Benny Pedersen: On Fri, 04 Feb 2011 08:44:39 -0600, Noel Jones wrote: At least set up a local caching resolver with 8.8.8.8 as the forwarder. in case of bind this is bad to use any forwarder since it disables hint zone, f

Re: postfix and dns lookup

2011-02-05 Thread Reindl Harald
Am 05.02.2011 18:49, schrieb Charles Marcus: >>> in case of bind this is bad to use any forwarder since it disables hint >>> zone, forwarders is more usefull pr zone, so keeep forwards out of options >>> containter in named.conf > >> And where is the problem? >> Nobody needs the "hint zone" in hi

Re: postfix and dns lookup

2011-02-05 Thread Jeroen Geilman
On 2/5/11 6:58 PM, Reindl Harald wrote: bullshit! Way to make your case. -- J.

Re: postfix and dns lookup

2011-02-05 Thread Reindl Harald
Am 05.02.2011 19:05, schrieb Jeroen Geilman: > On 2/5/11 6:58 PM, Reindl Harald wrote: >> bullshit! > > > > Way to make your case. sorry, but this was the only right answer for you can not use dns-forwarder and blacklists" http://www.postfix.org/TUNING_README.html > Run a local name server t

Re: postfix and dns lookup

2011-02-05 Thread Ralf Hildebrandt
* Reindl Harald : > > Way to make your case. > > sorry, but this was the only right answer for you can not > use dns-forwarder and blacklists" Well, you cannot use (for example) zen.spamhaus.org via 8.8.8.8 or 8.8.4.4 -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - U

Re: postfix and dns lookup

2011-02-05 Thread Noel Jones
On 2/5/2011 12:11 PM, Reindl Harald wrote: Am 05.02.2011 19:05, schrieb Jeroen Geilman: On 2/5/11 6:58 PM, Reindl Harald wrote: bullshit! Way to make your case. sorry, but this was the only right answer for you can not use dns-forwarder and blacklists" The statement is conditionally t

Re: postfix and dns lookup

2011-02-05 Thread Jeroen Geilman
On 2/5/11 7:11 PM, Reindl Harald wrote: Am 05.02.2011 19:05, schrieb Jeroen Geilman: On 2/5/11 6:58 PM, Reindl Harald wrote: bullshit! Way to make your case. sorry, but this was the only right answer for you can not use dns-forwarder and blacklists" I don't see any answer in there, not

Re: postfix and dns lookup

2011-02-05 Thread /dev/rob0
On Sat, Feb 05, 2011 at 03:24:01PM +0100, Matteo Cazzador wrote: > hello, the nature of the problem that causes temporary lookup > failure is not dns like i thinking of, the problem is caused > by mysql backend. Some spam has strange charset that caused > mysql error, see previous mail about it.

Re: postfix and dns lookup

2011-02-05 Thread Reindl Harald
Am 05.02.2011 19:27, schrieb /dev/rob0: > Perhaps so. And on average the TTL for cache hits will be roughly > half what you'd have when doing the recursion yourself. but it's only ONE request and your are not the onnyl one refreshing his caches >>> * This cached requests are much faster and few

Re: postfix and dns lookup

2011-02-05 Thread Stan Hoeppner
Charles Marcus put forth on 2/5/2011 11:49 AM: > But you can't use one of the big public DNS resolvers if you are using > spamhaus > or any of the other BLs... Exactly why I installed pdns recursor on my MX about a year ago or so. I'd been using my ISP's resolvers and began having problems with

Re: postfix and dns lookup

2011-02-05 Thread Stan Hoeppner
Reindl Harald put forth on 2/5/2011 12:49 PM: > http://www.barracudanetworks.com/ns/?L=de > > Get a (virtual) appliance, their filters are fine and > their one blacklist does never block anybody You speak of trust WRT to Spamhaus, which is the must trusted dnsbl outfit on the planet, and has bee

Re: postfix and dns lookup

2011-02-05 Thread Victor Duchovni
On Sat, Feb 05, 2011 at 01:49:23PM -0600, Stan Hoeppner wrote: > You speak of trust WRT to Spamhaus [...] Let's close the thread here. Not a good idea to debate whose RBL is less evil on this list. Both are widely used, neither is evil enough to warrant traffic here. -- Viktor.

Re: postfix and dns lookup

2011-02-05 Thread Reindl Harald
Am 05.02.2011 20:49, schrieb Stan Hoeppner: > Reindl Harald put forth on 2/5/2011 12:49 PM: > >> http://www.barracudanetworks.com/ns/?L=de >> >> Get a (virtual) appliance, their filters are fine and >> their one blacklist does never block anybody > > You speak of trust WRT to Spamhaus, which is

KILL THIS THREAD (postfix and dns lookup)

2011-02-05 Thread Wietse Venema
Victor Duchovni: > On Sat, Feb 05, 2011 at 01:49:23PM -0600, Stan Hoeppner wrote: > > > You speak of trust WRT to Spamhaus [...] > > Let's close the thread here. Not a good idea to debate whose RBL is > less evil on this list. Both are widely used, neither is evil enough > to warrant traffic here

Re: postfix and dns lookup

2011-02-05 Thread Benny Pedersen
On Sat, 05 Feb 2011 13:55:01 +0100, Reindl Harald wrote: > And where is the problem? spamhaus ? :-) > Nobody needs the "hint zone" in his LAN because some reasons: without the hint zone bind wont work > * A big external forwarder has many requests in his cache one problem is that a isp migh

Re: postfix and dns lookup

2011-02-05 Thread Reindl Harald
Am 05.02.2011 22:20, schrieb Benny Pedersen: >> * It reduces the load of the root-Servers > > no, root severs delegate dns to ones isp servers ?, are you kidding ? jesus christ what do you not understand that recursion needs some dns-queries to find out what is the authoritative nameserver and