Re: T_ANY

2010-03-23 Thread Barry Margolin
In article , Kevin Darcy wrote: > On 3/20/2010 5:29 PM, Tony Finch wrote: > > ANY queries are supposed to be used for debugging not for > > normal operations. > > > > > > At the risk of nitpicking your use of the term "supposed to be"... > > "ANY" queries (aka QTYPE=*), have pretty much be

Re: T_ANY

2010-03-23 Thread Hauke Lampe
Kevin Darcy wrote: > But I believe the QTYPE was > _originally_ intended to be a robust mechanism for fetching multiple > RRsets at a time.It just didn't work out that way... PowerDNS Recursor uses ANY to retrieve both A and records in one query: http://lwn.net/Articles/275823/ | * Full IP

Re: T_ANY

2010-03-22 Thread Kevin Darcy
On 3/20/2010 5:29 PM, Tony Finch wrote: ANY queries are supposed to be used for debugging not for normal operations. At the risk of nitpicking your use of the term "supposed to be"... "ANY" queries (aka QTYPE=*), have pretty much been reduced to a mere debugging tool, because of the stan

RE: T_ANY

2010-03-22 Thread Lightner, Jeff
--Original Message- From: bind-users-bounces+jlightner=water@lists.isc.org [mailto:bind-users-bounces+jlightner=water@lists.isc.org] On Behalf Of Mark Andrews Sent: Saturday, March 20, 2010 9:29 PM To: Tony Finch Cc: bind-users@lists.isc.org Subject: Re: T_ANY In message , Tony Fi nch writes

Re: T_ANY

2010-03-20 Thread Mark Andrews
In message , Tony Fi nch writes: > On Sat, 20 Mar 2010, Glenn English wrote: > > > > Just why qmail reports a T_ANY failure as a CNAME failure, I also don't > > know. > > This is a bug in qmail. It tries to canonicalize domains in the SMTP > envelope of outgoi

Re: T_ANY

2010-03-20 Thread Tony Finch
On Sat, 20 Mar 2010, Glenn English wrote: > > Just why qmail reports a T_ANY failure as a CNAME failure, I also don't > know. This is a bug in qmail. It tries to canonicalize domains in the SMTP envelope of outgoing messages. It originally did this by performing CNAME queries on ea

Re: T_ANY

2010-03-20 Thread Glenn English
On Mar 20, 2010, at 10:12 AM, Florian Weimer wrote: > Have you compiled qmail yourself? Thanks, Florian, but it's fixed. The problem was that my PIX firewall's IDS blocks T_ANY queries by default, and Yahoo's qmail does T_ANY queries. I turned the block off in the PIX. I

Re: T_ANY

2010-03-20 Thread Florian Weimer
* Glenn English: >>> Hi. This is the qmail-send program at yahoo.com. > Both servers are Debian lenny, 'named -v' says BIND 9.5.1-P3, and > bind's config check says it's OK. But it has nothing to do with any > of that, I think, because the query works from inside. Have you compiled qmail yoursel

Re: T_ANY

2010-03-19 Thread Glenn English
ny these days.) 6.3 fixed it. The command is "fixup protocol dns min_length ". It was indeed the PIX, though "ip audit signature 6053 disable" allows T_ANY DNS queries. By default sig 6053 blocks T_ANY on the outside interface... Thank you all for

Re: T_ANY

2010-03-19 Thread Kevin Oberman
gt; > And telnet to port 53 works -- to both nameservers, from inside or outside. > > ... > > I thought maybe the restriction to remote ports over 1023 might have > been it, so I removed it. Nope. > > It seems to me that there are 3 questions: Can bind tell the > differenc

Re: T_ANY

2010-03-19 Thread Glenn English
an bind tell the difference between inside and outside queries for T_ANY? Can the PIX? Can IOS even tell if this is a T_ANY DNS query? And, of course, there's the question I haven't thought of whose answer will fix my problem... -- Glenn English g...@slsware.com ___

RE: T_ANY

2010-03-19 Thread Lightner, Jeff
.@lists.isc.org [mailto:bind-users-bounces+jlightner=water@lists.isc.org] On Behalf Of Glenn English Sent: Friday, March 19, 2010 4:13 PM To: bind-users@lists.isc.org Subject: T_ANY I posted this to the postfix users list: One of my users had problems receiving from Yahoo a couple days ago. The

T_ANY

2010-03-19 Thread Glenn English
iled temporarily. (#4.4.3) >> I'm not going to try again; this message has been in the queue too long. I got responses saying that the problem was that my DNS ignores 'dig @ns1.slsware.com -t any slsware.com' (or 'dig +trace -t any slsware.com') and indeed it do