named.conf recursion no; and sendmail fails

[Geoff Wild]

If, on my primary mail/dns server, If I set recursion no; in named.conf, then emails fail with:

reject=553 5.1.8 ... Domain of sender address someone@a.real.mail.address does not exist


Course, someone@a.real.mail.address is used to protect the innocent (or not so innocent) IE - that's not the real email address...


my resolv.conf has

domain mydomain.ca
nameserver
nameserver
nameserver


I also use forwarders in my named.conf


When I do a dig or nslookup - it works fine - it only seems to affect sendmail (incoming and outgoing).

Thanks...Geoff

[Ivan Ferreira · Accepted solution]

The host will use the first available DNS server listed in /etc/resolv.conf, in this case, the local DNS server.

So, and won't be used as long is up.

If you disable recursion, forwarders and root name servers won't be consulted, and Internet Domains won't be resolved.

So you have the following options:

Use allow-recursion option instead of recursion no.
Configure sendmail to allow unknown domains.
Enable recursion.

[Geoff Wild]

Ah - okay - so don't do this:

recursion no;
allow-recursion { our-nets; };

Only do:

allow-recursion { our-nets; };

Rgds...Geoff

[Geoff Wild]

Don't use both options...