topic Re: named.conf recursion no; and sendmail fails in Operating System - Linux

named.conf recursion no; and sendmail fails

Geoff Wild — Wed, 30 May 2007 14:57:19 GMT

If, on my primary mail/dns server, If I set recursion no; in named.conf, then emails fail with:

reject=553 5.1.8 ... Domain of sender address someone@a.real.mail.address does not exist

Course, someone@a.real.mail.address is used to protect the innocent (or not so innocent) IE - that's not the real email address...

my resolv.conf has

domain mydomain.ca
nameserver
nameserver
nameserver

I also use forwarders in my named.conf

When I do a dig or nslookup - it works fine - it only seems to affect sendmail (incoming and outgoing).

Thanks...Geoff

Re: named.conf recursion no; and sendmail fails

Ivan Ferreira — Wed, 30 May 2007 15:22:09 GMT

The host will use the first available DNS server listed in /etc/resolv.conf, in this case, the local DNS server.

So, and won't be used as long is up.

If you disable recursion, forwarders and root name servers won't be consulted, and Internet Domains won't be resolved.

So you have the following options:

Use allow-recursion option instead of recursion no.
Configure sendmail to allow unknown domains.
Enable recursion.

Re: named.conf recursion no; and sendmail fails

Geoff Wild — Wed, 30 May 2007 15:24:56 GMT

Ah - okay - so don't do this:

recursion no;
allow-recursion { our-nets; };

Only do:

allow-recursion { our-nets; };

Rgds...Geoff

Re: named.conf recursion no; and sendmail fails

Geoff Wild — Wed, 30 May 2007 15:26:48 GMT

Don't use both options...