Re: [toaster] CNAME errors

[Rich Kasting]

I didn't think dnscache would help because non of the email is getting out because all are failing. What will dnscache actually do to fix the problem?  I know it will cache lookups, does it query in a different manner?  Will it take over for qmail's queries?  If so, where can I find good instructions for installing it? DNS Fixup on a PIX?   Does that make the intrusion detection module leave qmail servers alone?  :) Shane Chrisp wrote: On Mon, 2005-03-28 at 08:28 -0500, Rich Kasting wrote: Can you run dnscache on the qmail box? Also make sure that DNS Fixup is enabled on the PIX (iirc) i havnt touched a PIX for a while. Shane The weird part is that it's not blocking DNS queries that I issue from a command prompt. It seems to think that the ones that qmail issues are some sort of intrusion attempt pattern. I can actually perform successful dig a and dig mx from the command prompt. Does qmail really do something that much different in DNS that it could trigger intrusion detection? I'm just asking because the network guy is going to be reluctant. You know how paranoid they can be. :)