Re: [PATCH] Disable reverse DNS lookups
Could you: 1) put this in bugzilla 2) note in the documentation that some SASL methods require hostnames Thanks, :wes On 09 Sep 2010, at 06:47, Guilherme Manika wrote: > This patch adds a "disablereverselookups" option to imapd.conf that disables > reverse DNS lookups in imapd and pop3d. > > It doesn't affect other services (lmtp, mupdate, etc.) because they are not > Internet-facing services and so do not rely on external DNS to work. That's > probably acceptable. Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
Re: [PATCH] Disable reverse DNS lookups
On Thu, 9 Sep 2010, Guilherme Manika wrote: Oh, sure. Cyrus does a reverse DNS lookup to log the user's domain name to syslog. This adds an overhead to each incoming connection that increases the number of simultaneous connections to the system and may become devastating if there is a problem in external DNS connectivity. We added this when the DNS servers for a large part of our customer base experienced such problems, as that essentially destroyed our POP3 servers. Needless to say, this is only a problem for people operating large installations. or very small ones that do not have reverse DNS properly setup (not an uncommon situation) David Lang Guilherme Em 09/09/2010, às 08:38, Jeroen van Meeuwen (Kolab Systems) escreveu: Guilherme Manika wrote: This patch adds a "disablereverselookups" option to imapd.conf that disables reverse DNS lookups in imapd and pop3d. It doesn't affect other services (lmtp, mupdate, etc.) because they are not Internet-facing services and so do not rely on external DNS to work. That's probably acceptable. Mind sharing with us what the purpose of this patch is? Kind regards, -- Jeroen van Meeuwen Senior Engineer, Kolab Systems AG e: vanmeeu...@kolabsys.com t: +316 42 801 403 w: http://www.kolabsys.com pgp: 9342 BF08 Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
Re: [PATCH] Disable reverse DNS lookups
Oh, sure. Cyrus does a reverse DNS lookup to log the user's domain name to syslog. This adds an overhead to each incoming connection that increases the number of simultaneous connections to the system and may become devastating if there is a problem in external DNS connectivity. We added this when the DNS servers for a large part of our customer base experienced such problems, as that essentially destroyed our POP3 servers. Needless to say, this is only a problem for people operating large installations. Guilherme Em 09/09/2010, às 08:38, Jeroen van Meeuwen (Kolab Systems) escreveu: > Guilherme Manika wrote: >> This patch adds a "disablereverselookups" option to imapd.conf that >> disables reverse DNS lookups in imapd and pop3d. >> >> It doesn't affect other services (lmtp, mupdate, etc.) because they are >> not Internet-facing services and so do not rely on external DNS to work. >> That's probably acceptable. >> > > Mind sharing with us what the purpose of this patch is? > > Kind regards, > > -- > Jeroen van Meeuwen > Senior Engineer, Kolab Systems AG > > e: vanmeeu...@kolabsys.com > t: +316 42 801 403 > w: http://www.kolabsys.com > > pgp: 9342 BF08 > > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
Re: [PATCH] Disable reverse DNS lookups
Guilherme Manika wrote: > This patch adds a "disablereverselookups" option to imapd.conf that > disables reverse DNS lookups in imapd and pop3d. > > It doesn't affect other services (lmtp, mupdate, etc.) because they are > not Internet-facing services and so do not rely on external DNS to work. > That's probably acceptable. > Mind sharing with us what the purpose of this patch is? Kind regards, -- Jeroen van Meeuwen Senior Engineer, Kolab Systems AG e: vanmeeu...@kolabsys.com t: +316 42 801 403 w: http://www.kolabsys.com pgp: 9342 BF08 Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
[PATCH] Disable reverse DNS lookups
This patch adds a "disablereverselookups" option to imapd.conf that disables reverse DNS lookups in imapd and pop3d. It doesn't affect other services (lmtp, mupdate, etc.) because they are not Internet-facing services and so do not rely on external DNS to work. That's probably acceptable.Guilherme disablereverselookups.patch Description: Binary data Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
