[dns-operations] DNSSEC and qmail

[Patrik Wallstrom]

On Oct 8, 2009, at 11:54 AM, Tony Finch wrote:

> We've just had a report of qmail being unable to deliver mail to our  
> site.
> The cam.ac.uk zone has been signed for a few months, and it seems that
> some of our DNS responses blow out qmail's 512 byte response buffer.  
> Its
> error messsage is "CNAME lookup failed temporarily" but in fact qmail
> actually performs an T_ANY lookup which produces a 1.3KB reply (DO=0).


This is a very common error for qmail - and has been for a very long  
time. I thought it was well documented. (The answer for MX at  
yahoo.com is 586 bytes!)  The first time I encountered this was in  
2001, and my standing recommendation is not to use qmail at all.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2210 bytes
Desc: not available
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20091008/c044185b/attachment.bin>