Russell Nelson <[EMAIL PROTECTED]> writes:

> *Always* run a nameserver on your qmail machine, even if it's
> caching-only.

Er... if it's handling a reasonably high volume of mail.  If it's only
churning out a message or two every ten minutes, I wouldn't bother; BIND
is a huge memory hog and also a program that tends to have to be
frequently upgraded due to security holes.

In other words, run a caching name server on your mail *servers*, but not
on every random Unix workstation that happens to be running qmail.

(Oh, and remember:  If you have any programs that use the standard
gethostbyname() calls and you're using Solaris, link them directly against
libbind if you have a local name server.  Otherwise, they'll still query
through nscd, which on versions of Solaris prior to 7 is single-threaded
for DNS queries.)

-- 
Russ Allbery ([EMAIL PROTECTED])         <URL:http://www.eyrie.org/~eagle/>

Reply via email to