DoH plugin for BIND

Erich Eckner bind at eckner.net
Sat May 2 18:23:59 UTC 2020


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

I assume, the (on-topic) discussion so far was about the serving part of 
bind. (Correct me, if I'm wrong)

Will there be client-side DoT/DoH support in bind, too? E.g. will my 
recursive (or forwarding) resolver be able to resolve upstream dns via 
those? I don't see, how I could use a reverse proxy or stunnel to achieve 
this, currently (assuming, the authoritative dns server supports DoT 
and/or DoH, of course), because I would need one stunnel per upstream dns 
server which I do not know in advance - right?

regards,
Erich

On Sat, 2 May 2020, John Levine wrote:

> In article <mailman.335.1588436727.942.bind-users at lists.isc.org> you write:
>> On Sat, 2 May 2020, Michael De Roover wrote:
>>
>>> Even if your ISP allows it, chances are that other mail servers will
>>> reject it ...
>
>> My residential-class static IP mail server has never had problems
>> delivering mail. I've checked it many times over the years on many
>> blacklist checkers and never had anything but green lights.
>
> Your ISP is quite unusual.  Count your blessings.  The large cable
> providers in the US and Canada block outgoing port 25 on residential
> networks.
>
> To whoever said that MUAs still default to port 25 submission, you
> must use different MUAs from the rest of us.  All the ones I use
> default to 587 and 465.
>
> R's,
> John
>
> PS: What deoes this have to do with BIND?
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
-----BEGIN PGP SIGNATURE-----
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=EENM
-----END PGP SIGNATURE-----


More information about the bind-users mailing list