Afficher un message
Vieux 26/04/2007, 23h27   #2
Per Hedeland
Aucun Avatar
 
Messages: n/a
Hébergeur:
Par défaut Re: Disable AAAA (IPv6) lookups without recompiling Sendmail

In article <1177607242.148087.147860@t39g2000prd.googlegroups .com>
Limbic_Region <joshua.gatcomb@gmail.com> writes:
>I am using a stock Sendmail 8.13 on Solaris 9 which was compiled with
>IPv6 support.
>
>I am trying to disable the AAAA (IPv6) DNS queries on inbound
>messages.
>
>I have disabled sendmail from running in IPv6 modue using the
>DaemonPortOptions
>confirmed by netstat -anf inet6


Per the sendmail documentaion (and your observation), this controls what
addresses the daemon listens on - it should be (and is) independent of
DNS queries made.

>I have disabled IPv6 in Resolver by -use_inet6


Per the resolver documentation on my OS (FreeBSD), this option is off by
default, and if on will map IPv4 addresses into IPv6 - not relevant for
which queries are made.

>Basically, the three pieces of advice given are:
>1. Disable using DaemonPort Options
>2. Disable using Resolver Options
>3. Recompile
>
>I have tried 1 and 2 to no avail and do not want to have to recompile
>if at all possible.


It will work though.:-)

>Does anyone have any ideas?


The only runtime condition for doing AAAA lookups is that the kernel
actually supports IPv6, determined by (in conf.c):

/* Detect if IPv6 is available at run time */
i = socket(AF_INET6, SOCK_STREAM, 0);
if (i >= 0)
{
InetMode = AF_INET6;
(void) close(i);
}
else
InetMode = AF_INET;

Maybe your OS supports disabling IPv6 dynamically, or you could rebuild
its kernel instead of rebuilding sendmail if you prefer that...

--Per Hedeland
per@hedeland.org


  Réponse avec citation
 
Page generated in 0,05393 seconds with 9 queries