Lynn, Although I'm new to qmail I think I can answer this. In order for an external mailserver to connect to yours to deliver mail it must be able to find the MX record for your domain. This could be either outside or inside your firewall but I would agree that outside is best. The DNS server outside your firewall shouldn't publish unnecessary information about the rest of your system. You can have another DNS server inside your firewall for local DNS queries.
This is the way I have my system configured (I just want to learn how to upgrade my Exchange server to qmailtoaster). :-) Regards, Mark. -----Original Message----- From: Lynn [mailto:[EMAIL PROTECTED] Sent: 29 December 2005 16:23 To: [email protected] Subject: RE: [qmailtoaster] open dns ports... I should have wrote: "Is there actually a reason to open ports 53 UDP & TCP in the (external) firewall for the DNS service? Meaning port forwarding of a router... Routers tend to allow all traffic out, but I can't find any reason to port forward DNS queries into a LAN. I never connect servers directly to the internet - I think that's crazy. I always hide them behind routers running NAT. So the question really is, is there a reason to allow the outside world to query my private DNS service? -----Original Message----- From: Jake Vickers [mailto:[EMAIL PROTECTED] Sent: Thursday, December 29, 2005 8:57 AM To: [email protected] Subject: Re: [qmailtoaster] open dns ports... Lynn wrote: >I havent seen any instructions on how to start a new topic, so hope >this works... > >Is there actually a reason to open ports 53 UDP & TCP for the DNS >service? > >Do email servers actually query the DNS service on a remote server? > > Yes it does. When you type an email (such as the one I use for the mailing list, [EMAIL PROTECTED]), your server needs to be able to query DNS to find out who millenia-llc.com is, and what their MX record is to actually deliver the message to. ------------------------------------------------------------------ --- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.371 / Virus Database: 267.14.8/215 - Release Date: 12/27/2005 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.371 / Virus Database: 267.14.8/215 - Release Date: 12/27/2005 --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
