Sendmail mystery

David Bandel david.bandel
Wed Feb 21 15:01:35 PST 2007


On 2/20/07, Stuart Biggerstaff <biggers at lindahall.org> wrote:
> Thanks, David.
>
> Of course that sounds exactly right, but we have an MX in the zone file.
> And the box is (or should be) looking to itself for DNS
>
> $ttl 38400
> lindahall.org.  IN      SOA     www.lindahall.org.
> support.lindahall.org. (
>                         1071778405
>                         10800
>                         3600
>                         604800
>                         38400 )
> lindahall.org.  IN      NS      www.lindahall.org.
> lindahall.org.  IN      MX      1 descartes.lindahall.org.
> leonardo.lindahall.org. IN      A       192.168.101.101
> descartes.lindahall.org.        IN      A       10.1.101.113
>
> We had tried to keep it as simple as possible, as we only really need a
> caching name server for these systems, but for need to access the mail
> server.  Which was previously in the DMZ with these systems, but is now
> inside (thus the different subnet).
>
>


I am of the opinion that all mail servers should run DNS and get DNS
from themselves.  Reason:  I have watched the sheer quantity of DNS
traffic generated when a spammer starts sending hundreds of thousands
of e-mails.  The DNS traffic is incredible (I do some work for an ISP
who caters to spam -- he knows how I feel about it, but I can't
dissuade him).  Once DNS is running on the mail system, udp traffic
drops back to normal.  What an e-mail server can generate in DNS
queries is awesome.  Just to help change his mind, I'd like to turn
off the DNS server in the mail system, but that would be mean (and
drop me to his level).

Ciao,

David A. Bandel
-- 
Focus on the dream, not the competition.
            - Nemesis Air Racing Team motto



More information about the Linux-users mailing list