How to disable IPV6 AAAA lookups?
Kind Bud
lookups for IPV6 AAAA records. There is mail in my queue bound for
domains that are served by nameservers that do not understand AAAA
queries. They eventually timeout, and sendmail defers with a host
lookup error. Hitter.net's nameservers are an example - try making a
query for an AAAA record - it times out. My local nameserver caches
this as a SERVFAIL. Ugh. Looks like most of the mail stuck in my queue
is there for this reason. There are some legit lookup failures, but
most of them are for this IPV6 snafu.
How do I disable IPV6 lookups? Can it be done in the cf file, or do I
have to compile a new binary with -DIPV6_NOT_READY_FOR_PRIMETIME ?
--
--> My real e-mail address is:
--> mbatchelor "at" citysearch "dot" com
--> I rarely check the mailbox at My-Deja.com. It's /dev/null for spam.
Sent via Deja.com http://www.deja.com/
Before you buy.
Casper H.S. Dik - Network Security Engineer
Kind Bud <kin...@my-deja.com> writes:
>I have sendmail 8.9.3+Sun, bundled with Solaris 8. It likes to do
>lookups for IPV6 AAAA records. There is mail in my queue bound for
>domains that are served by nameservers that do not understand AAAA
>queries. They eventually timeout, and sendmail defers with a host
>lookup error. Hitter.net's nameservers are an example - try making a
>query for an AAAA record - it times out. My local nameserver caches
>this as a SERVFAIL. Ugh. Looks like most of the mail stuck in my queue
>is there for this reason. There are some legit lookup failures, but
>most of them are for this IPV6 snafu.
>How do I disable IPV6 lookups? Can it be done in the cf file, or do I
>have to compile a new binary with -DIPV6_NOT_READY_FOR_PRIMETIME ?
You may have to disable IPv6 altogether?
Also; IPv6 lookups are governed by "ipnodes" in /etc/nsswitch.conf.
You may disable IPv6 lookups that way, I think.
Casper
--
Expressed in this posting are my opinions. They are in no way related
to opinions held by my employer, Sun Microsystems.
Statements on Sun products included here are not gospel and may
be fiction rather than truth.
Kind Bud
Caspe...@Holland.Sun.Com (Casper H.S. Dik - Network Security
Engineer) wrote:
> I wrote:
> >How do I disable IPV6 lookups? Can it be done in the cf file, or do
I
> >have to compile a new binary with -DIPV6_NOT_READY_FOR_PRIMETIME ?
>
> You may have to disable IPv6 altogether?
>
> Also; IPv6 lookups are governed by "ipnodes" in /etc/nsswitch.conf.
>
> You may disable IPv6 lookups that way, I think.
>
> Casper
Thanks, Casper. I'll take your answer to mean "compile a new sendmail".
I am not using IPv6, and ipnodes is still commented out of my
nsswitch.conf. There are no IPv6 addresses anywhere on my network.
At Sunsolve, I found a bug ID (4268920) that mentioned the IPv6 code in
sendmail was incomplete, but the person who submitted it said they had
not found a way to get sendmail to "do the wrong thing". I submitted a
trouble ticket referencing this bug ID, describing how to get it to do
the wrong thing - deploy it on the real Internet.
Thanks again... firing up the compiler now. :)
> --
> Expressed in this posting are my opinions. They are in no way related
> to opinions held by my employer, Sun Microsystems.
> Statements on Sun products included here are not gospel and may
> be fiction rather than truth.
>
--
hume.sp...@bofh.halifax.ns.ca
> Thanks, Casper. I'll take your answer to mean "compile a new sendmail".
Well, a lot of people do that anyway.
> I am not using IPv6, and ipnodes is still commented out of my
> nsswitch.conf. There are no IPv6 addresses anywhere on my network.
Did you try enabling ipnodes in nsswitch.conf, and just leaving it set to
"files"? In that case, it wouldn't have even bothered with DNS...
--
Brandon Hume - hume -> BOFH.Halifax.NS.Ca, http://WWW.BOFH.Halifax.NS.Ca/
-> Solaris Snob and general NOCMonkey
Kind Bud
hume.sp...@bofh.halifax.ns.ca wrote:
> In comp.unix.solaris Kind Bud <kin...@my-deja.com> wrote:
> > Thanks, Casper. I'll take your answer to mean "compile a new
sendmail".
>
> Well, a lot of people do that anyway.
>
> > I am not using IPv6, and ipnodes is still commented out of my
> > nsswitch.conf. There are no IPv6 addresses anywhere on my network.
>
> Did you try enabling ipnodes in nsswitch.conf, and just leaving it
set to
> "files"? In that case, it wouldn't have even bothered with DNS...
Yes I tried that. Whether or not it is commented out, sendmail
8.9.3+Sun does IPv6 AAAA queries.
The binary I compiled today from 8.9.3 source does not. Looks like a
bug to me.
>
> --
> Brandon Hume - hume -> BOFH.Halifax.NS.Ca,
http://WWW.BOFH.Halifax.NS.Ca/
> -> Solaris Snob and general NOCMonkey
>
--
Casper H.S. Dik - Network Security Engineer
Kind Bud <kin...@my-deja.com> writes:
>At Sunsolve, I found a bug ID (4268920) that mentioned the IPv6 code in
>sendmail was incomplete, but the person who submitted it said they had
>not found a way to get sendmail to "do the wrong thing". I submitted a
>trouble ticket referencing this bug ID, describing how to get it to do
>the wrong thing - deploy it on the real Internet.
Solaris Sendmail bug #4268920 is fixed in Solaris 8, so it shouldn't
have bitten you.
Casper