[dns-wg] DNSSEC breaks qmail

* Peter Koch <pk at DENIC.DE> [2006-02-17 12:49]:
> >   - qmail does not support EDNS extensions for larger UDP packets.
> That's probably not the application's problem, but the resolver's.

no, since qmail reimplements the resolver parts (don't make me comment 
on that)

> >   * The response is truncated to 512 bytes and marked "truncated".
> >   - qmail does not support the very old TCP fallback requirement for DNS.
> If that's the case, see above.

see above - it IS qmail's fault.

there's plenty of patches around to make it at leats re-query over TCP 
for those whi want to work around that bug.

-- 
Henning Brauer, hb at bsws.de, henning at openbsd.org
BS Web Services, http://bsws.de
OpenBSD-based Webhosting, Mail Services, Managed Servers, ...