Eric Shubert wrote:
Jake Vickers wrote:
Eric Shubert wrote:
Jake Vickers wrote:
Jamie wrote:
hi does qmail-toaster compatibible with DNSSEC? like, when the
root zone is signed next year, will qmail-toaster barf at the size
of dns-sec records? do i need ot use djbdns or can i still use
BIND and will qmail accetp it? I've heard that qmail will die when
the root zones and TLD's follow with DNSSEC as the size is not big
enough in the code.
thx,
owlcat
Qmail does not intrerface with DNS directly. It is handled by an
underlying system, and only obtain results.
Basically it just asks DNS for an answer, and your DNS system
(Bind, djbdns, etc.) supplies an answer. DNSSEC will be handled on
that level.
This makes me wonder though, as djbdns is not being developed any
more to any extent, will it become broken by dnssec? I'm guessing
that someone will likely patch djbdns so it's compatible (if it's
not already), but it'd be nice if someone would verify this.
Personally, I don't use djbdns so I don't really care to find out
for myself.
I'm sure there will be a patch (if there isn't already), but
Bernstein will not support an official dnssec patch:
http://cr.yp.to/djbdns/forgery.html
He's pushing his DNSCurve method, which uses one of his (Bernstein)
algorythms for security.
The djbdns package on the main site is only intended for a caching
name server, and I think all distros have a Bind caching nameserver
package (or meta package) in their standard repos at this point. Once
it gets close to the official cutoff deadline we'll have a talk about
this at that point. If there is no patch for djbdns at that time, we
will probably drop support in favor of distro base support. If there
is a patch, then I'll just patch it and continue as we have.
And I personally do not use it either. I did a video on how to set up
your own whitelist/blacklist with it, but I do not run it on any of
my mail servers.
I didn't remeber that it was supported. Is there a good reason to
continue support? Given that all distros have a caching nameserver
package in their standard repos, I think it might be a good policy to
use what's provided by the distro.
It was added as a carryover from when Nick ran the project. He had a lot
of requests for it, so he put it up. I've continued to update/patch it
as time has gone on. I'll continue to support it until the time comes
that it's not supportable/not economical (time-wise) to support it.
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
