Re: Specific DNS server

2021-04-22 Thread Erwan David
Le 22/04/2021 à 21:14, Sonic a écrit : You could run Postfix in a container (LXC) on the host. It would have it's own IP and it's own resolv.conf. Would'nt the chroot feature built in postfix sufficient for this ?

Re: Specific DNS server

2021-04-22 Thread Simon Wilson
- Message from Wietse Venema - Date: Thu, 22 Apr 2021 10:01:09 -0400 (EDT) From: Wietse Venema Subject: Re: Specific DNS server To: si...@simonandkate.net Cc: postfix-users@postfix.org Simon Wilson: Is there a way to make Postfix/postscreen use a specific DNS

Re: Specific DNS server

2021-04-22 Thread Sonic
You could run Postfix in a container (LXC) on the host. It would have it's own IP and it's own resolv.conf.

Re: Specific DNS server

2021-04-22 Thread Matus UHLAR - fantomas
>I was once I need to get exactly this. >I solved this by setting up my own nameserver at localhost, that >delegates >internal names to resolve by internal nameserver, and external ones to >resolve by external nameserver. It can be done pretty easy if you can >distinguish internal from external na

Re: Specific DNS server

2021-04-22 Thread Jaroslaw Rafa
Dnia 22.04.2021 o godz. 17:24:34 Benny Pedersen pisze: > >I was once I need to get exactly this. > >I solved this by setting up my own nameserver at localhost, that > >delegates > >internal names to resolve by internal nameserver, and external ones to > >resolve by external nameserver. It can be do

Re: Specific DNS server

2021-04-22 Thread Jaroslaw Rafa
Dnia 22.04.2021 o godz. 09:33:04 @lbutlr pisze: > > What? /etc/hosts is processed before DNS, that is how adding adservers to > /etc/hosts blocks those adservers from being accessed. At least in Linux, it actually depends on the contents of file /etc/nsswitch.conf . If there's an entry like "host

Re: Specific DNS server

2021-04-22 Thread Claus Assmann
On some OS the following code works - I use that for regression testing when I need fake DNS data: void dns_setns(struct in_addr *ns, unsigned int port) { if ((_res.options & RES_INIT) == 0) (void) res_init(); _res.nsaddr_list[0].sin_family = AF_INET; _res.n

Re: Specific DNS server

2021-04-22 Thread Marco Pizzoli
On Thu, Apr 22, 2021 at 5:21 PM Benny Pedersen wrote: > On 2021-04-22 16:44, Marco Pizzoli wrote: > > > I am afraid you did not get my point. > > i dont know your solution then > > rpz and qname can be problematic > > https://labs.ripe.net/author/wouter_de_vries/making-the-dns-more-private-with-q

Re: Specific DNS server

2021-04-22 Thread Viktor Dukhovni
On Thu, Apr 22, 2021 at 04:53:21PM +0200, Jaroslaw Rafa wrote: > > I needed to have Postfix to solve Internet DNS names, for obvious reasons. > > At the same time, I needed to be able to solve Intranet DNS names: > > monitoring server, backup server, etc... > > I was once I need to get exactly th

Re: Specific DNS server

2021-04-22 Thread @lbutlr
On 22 Apr 2021, at 09:20, Benny Pedersen wrote: > n 2021-04-22 16:44, Marco Pizzoli wrote: >> Due also to some other constraints, I ended up relying on static >> entries in /etc/hosts. > > this file is only for when real dns server is down, not used when dns server > is up What? /etc/hosts is p

Re: Specific DNS server

2021-04-22 Thread Benny Pedersen
On 2021-04-22 16:53, Jaroslaw Rafa wrote: Dnia 22.04.2021 o godz. 16:44:13 Marco Pizzoli pisze: I needed to have Postfix to solve Internet DNS names, for obvious reasons. At the same time, I needed to be able to solve Intranet DNS names: monitoring server, backup server, etc... I was once I

Re: Specific DNS server

2021-04-22 Thread Benny Pedersen
On 2021-04-22 16:44, Marco Pizzoli wrote: I am afraid you did not get my point. i dont know your solution then rpz and qname can be problematic https://labs.ripe.net/author/wouter_de_vries/making-the-dns-more-private-with-qname-minimisation/ I needed to have Postfix to solve Internet DNS

Re: Specific DNS server

2021-04-22 Thread Jaroslaw Rafa
Dnia 22.04.2021 o godz. 16:44:13 Marco Pizzoli pisze: > > I needed to have Postfix to solve Internet DNS names, for obvious reasons. > At the same time, I needed to be able to solve Intranet DNS names: > monitoring server, backup server, etc... I was once I need to get exactly this. I solved this

Re: Specific DNS server

2021-04-22 Thread Tobi
Would it be an option to configure a policy for your DNS server to **not** send queries from postfix host(s) through the add&tracker filter? Cheers tobi On 4/22/21 12:20 PM, Simon Wilson wrote: > Is there a way to make Postfix/postscreen use a specific DNS server? > > Reason for

Re: Specific DNS server

2021-04-22 Thread Marco Pizzoli
On Thu, Apr 22, 2021 at 4:37 PM Benny Pedersen wrote: > On 2021-04-22 12:58, Marco Pizzoli wrote: > > Hello, > > +1 for this Request for Improvement. > > I also faced this need. > > > > Changing the machine solver was, unfortunately, not an option. > > we all love 127.0.0.1 > > solution is to not

Re: Specific DNS server

2021-04-22 Thread Benny Pedersen
On 2021-04-22 12:58, Marco Pizzoli wrote: Hello, +1 for this Request for Improvement. I also faced this need. Changing the machine solver was, unfortunately, not an option. we all love 127.0.0.1 solution is to not have spamasassin running on same host as postfix, or tell spamassassin to use

Re: Specific DNS server

2021-04-22 Thread Wietse Venema
Sven Schwedas: > On 22.04.21 16:08, Lars Liedtke wrote: > > I know this does not apply to all kinds of setup, but with > > virtualization and containerization it should be easy to seperate > > Postfix and provide a different nameserver in resolv.conf for it. > > Yes, but postfix' builtin chroot is

Re: Specific DNS server

2021-04-22 Thread Lars Liedtke
> > (We're using systemd-nspawn, so if *that* works, anything proper > definitely will.) > >> Am 22.04.21 um 16:03 schrieb Wietse Venema: >>> Markus Sch?nhaber: >>>> 22.04.21, 12:20 +0200, Simon Wilson: >>>> >>>>> Is there

Re: Specific DNS server

2021-04-22 Thread Sven Schwedas
fix/postscreen use a specific DNS server? One way I could think of is to use postfix' chroot features and configure this specific DNS server in the chroot's resolv.conf. That may or may not work. There is no supported way to prevent the SYSTEM LIBRARY from picking up the resolv.conf file befo

Re: Specific DNS server

2021-04-22 Thread Gerald Galster
>> Is there a way to make Postfix/postscreen use a specific DNS server? > > Edit /etc/resolv.conf. > > No kidding - Postfix uses the SYSTEM LIBRARY for DNS lookups, and > the SYSTEM LIBRARY uses the resolv.conf file. Theree are no plans > to re-implement this part

Re: Specific DNS server

2021-04-22 Thread Lars Liedtke
:20 +0200, Simon Wilson: >> >>> Is there a way to make Postfix/postscreen use a specific DNS server? >> One way I could think of is to use postfix' chroot features and >> configure this specific DNS server in the chroot's resolv.conf. > That may or may not work.

Re: Specific DNS server

2021-04-22 Thread Wietse Venema
Markus Sch?nhaber: > 22.04.21, 12:20 +0200, Simon Wilson: > > > Is there a way to make Postfix/postscreen use a specific DNS server? > > One way I could think of is to use postfix' chroot features and > configure this specific DNS server in the chroot's resolv.

Re: Specific DNS server

2021-04-22 Thread Wietse Venema
Simon Wilson: > Is there a way to make Postfix/postscreen use a specific DNS server? Edit /etc/resolv.conf. No kidding - Postfix uses the SYSTEM LIBRARY for DNS lookups, and the SYSTEM LIBRARY uses the resolv.conf file. Theree are no plans to re-implement this part of the SYSTEM LIBRARY

Re: Specific DNS server

2021-04-22 Thread Markus Schönhaber
22.04.21, 12:20 +0200, Simon Wilson: > Is there a way to make Postfix/postscreen use a specific DNS server? One way I could think of is to use postfix' chroot features and configure this specific DNS server in the chroot's resolv.conf. -- Regards mks

Re: Specific DNS server

2021-04-22 Thread Marco Pizzoli
Hello, +1 for this Request for Improvement. I also faced this need. Changing the machine solver was, unfortunately, not an option. Thanks Marco On Thu, Apr 22, 2021 at 12:21 PM Simon Wilson wrote: > Is there a way to make Postfix/postscreen use a specific DNS server? > > Reaso

Specific DNS server

2021-04-22 Thread Simon Wilson
Is there a way to make Postfix/postscreen use a specific DNS server? Reason for the question: My network has an internal (non-ISP forwarding) DNS server for both internal and external resolution, and that is default nameserver across the network including for the mail server. That DNS server