Jake Vickers wrote:
Eric Shubert wrote:
Jake Vickers wrote:
Jamie wrote:
hi does qmail-toaster compatibible with DNSSEC? like, when the root
zone is signed next year, will qmail-toaster barf at the size of
dns-sec records? do i need ot use djbdns or can i still use BIND and
will qmail accetp it? I've heard that qmail will die when the root
zones and TLD's follow with DNSSEC as the size is not big enough in
the code.
thx,
owlcat
Qmail does not intrerface with DNS directly. It is handled by an
underlying system, and only obtain results.
Basically it just asks DNS for an answer, and your DNS system (Bind,
djbdns, etc.) supplies an answer. DNSSEC will be handled on that level.
This makes me wonder though, as djbdns is not being developed any more
to any extent, will it become broken by dnssec? I'm guessing that
someone will likely patch djbdns so it's compatible (if it's not
already), but it'd be nice if someone would verify this. Personally, I
don't use djbdns so I don't really care to find out for myself.
I'm sure there will be a patch (if there isn't already), but Bernstein
will not support an official dnssec patch:
http://cr.yp.to/djbdns/forgery.html
He's pushing his DNSCurve method, which uses one of his (Bernstein)
algorythms for security.
The djbdns package on the main site is only intended for a caching name
server, and I think all distros have a Bind caching nameserver package
(or meta package) in their standard repos at this point. Once it gets
close to the official cutoff deadline we'll have a talk about this at
that point. If there is no patch for djbdns at that time, we will
probably drop support in favor of distro base support. If there is a
patch, then I'll just patch it and continue as we have.
And I personally do not use it either. I did a video on how to set up
your own whitelist/blacklist with it, but I do not run it on any of my
mail servers.
I didn't remeber that it was supported. Is there a good reason to
continue support? Given that all distros have a caching nameserver
package in their standard repos, I think it might be a good policy to
use what's provided by the distro.
--
-Eric 'shubes'
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
