Re: [qmailtoaster] Issues with CNAME requests...

[Jake Vickers]

Stanimir Markov wrote:

Hi everyone,

this is my first post to this list, so I'm going straight to the problem:

from several days, I see the following message in my /var/log/qmail/send/current 2007-02-14 13:41:00.040018500 delivery 104: deferral: CNAME_lookup_failed_temporarily._(#4.4.3)/ From what I've researched on the web (http://www.faqts.com/knowledge_base/view.phtml/aid/28942 <http://www.faqts.com/knowledge_base/view.phtml/aid/28942>) , this issue is dated back in 2003-2004, and should be fixed already in the current toaster version. I've upgraded my qmailtoaster on 25 Nov 2006 for the last time.

This issue happens, because I'm using my ISP name servers (BIND 9.3.3) witch returns some additional records for related to the DNSSEC , and the ANY query size for the particular domain that causes me troubles is ;; MSG SIZE rcvd: 926 I've downloaded the qmail-toaster-1.03 (1.3.12) rpm , and it looks like the following patch is not included : "Christopher K. Davis has a patch to accept oversize DNS packets <http://www.ckdhr.com/ckd/qmail-103.patch> which works on both qmail's dns.c and tcpserver's dns.c. If you don't want to patch qmail, you can ameliorate the problem somewhat using djbdns <http://www.tinydns.org/>, which returns only the records you ask for, making for a smaller ANSWER section."

Or at least I could not find it anywhere ... the SPECS file however says it's there since build-05.

Hmm. The patch was in there by default from last I knew. It may have been forgotten to be put in. I'll let the powers-that-be that maintain the package answer that one. I had this problem a long time ago with a couple domains; sympatico.ca and another one (don't remember). What I did to fix this temporarily (which is in fact still in place 3 years later) was to add a SMTP route for the domain that is having the CNAME errors:

[EMAIL PROTECTED] ~]# cat /var/qmail/control/smtproutes
sympatico.ca:209.226.175.87

I also wrote up a wiki page about it (http://wiki.qmailtoaster.com/index.php/Smtproutes). It does have drawbacks; since you're targeting only 1 server for that domain, if that particular server happens to be down it won't try any others, etc. But QMail has it's own "quirks" with SMTP anyway - it only tries 1 SMTP server; if it gets an answer (even an error), it does not move up to the next MX record in DNS anyway, just keeps at the one that gave it AN answer.

Hope that helps some.

smime.p7s
Description: S/MIME Cryptographic Signature