Re: [Zinq-general] Caching SERVFAIL?

On 05/09/2009 06:43 AM, Mark Johnson wrote:
> I think 5 minutes is waaaay to long.  I'd tend towards less than 30 seconds.
>   
We used to run it here - but I removed it as it was causing us to
effectively block mail to a local ISP 3-5 times a day for 5 minutes at a
time. End result - dozens of bounced emails as Qmail (calling dnscache)
started receiving "no such host" responses to MX/A lookups due to that
patch.

As far as I'm aware, it only ever affected our connectivity to that one
ISP - I'm sure their DNS servers was timing out under load - but the
reaction of the patch - to effectively say hosts don't exist - was
definitely not the correct response.

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1