qmail issue

[Mark Andrews]

> > 		dig any gsb.ceu.hu @ns.ceu.hu  		(UDP)
> > 		dig any gsb.ceu.hu @ns.ceu.hu +vc	(TCP)
>
> Finally, I got delegated the gsb.ceu.hu master zone to bhole.gsb.ceu.hu 
> which is totaly different place, but the situation is the same :(
> 
> I tried to query "dig any gsb.ceu.hu" -> without success connection timed 
> out, but If I tried to query "dig any gsb.ceu.hu @bhole.gsb.ceu.hu" I was 
> successed. :( The TCP queries are fine of course.

	Of course this will happen.  The servers for ceu.hu are
	still behind the broken firewall so the gsb.ceu.hu/any/udp
	queries to them are not getting a response so there is no
	referral to bhole.gsb.ceu.hu.

	You need to put a server for ceu.hu outside the broken
	firewall.
 
> I think If I could not ask via UDP the qmails could not send me the mails 
> with CNAME error. :(
> 
> I got started an investigation to figure out the FW settings, but the 
> first look showed nothing.

	I would be talking to CISCO.
 
> Any ideas?
> 
> Best wishes,
> Andras
> 
> 
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org