From owner-freebsd-stable@FreeBSD.ORG Thu Aug 8 09:35:42 2013 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id F0F4AD06; Thu, 8 Aug 2013 09:35:41 +0000 (UTC) (envelope-from timp87@gmail.com) Received: from mail-vb0-x231.google.com (mail-vb0-x231.google.com [IPv6:2607:f8b0:400c:c02::231]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id A00C02346; Thu, 8 Aug 2013 09:35:41 +0000 (UTC) Received: by mail-vb0-f49.google.com with SMTP id w16so2946845vbb.8 for ; Thu, 08 Aug 2013 02:35:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=STQv6zXYlebc+MJb+fEygoLyeo1mQaoOMtuQMjl40gA=; b=yKqRQVrXB6NjZlhndGUQGKOId1iPKoyAIGUKkLWzoca+unIQP5VaH9/2SGPHeACg+z GackxsU7SJYZcFT3CtxzRbl5mgLBGsNd6m6qIa9D4AIaAIx50b65VNKZtcq/Phd5L1r1 xJyQ8f1BMkxgGZ82q5xWwdwfKfrttQ7t69Xm4N4BuZpkW2w0oY/QBvlT1Kn3Ksf38W8G 3ABk8zUm2vs+7DeRQblPdWn4HHcU8OOSmUvveTwL3NSZK8dkfQNiicwrNhvrTRMQvtoC v7mOBE/M3WKsWtnc7HwSUnussyCOw7NnfywmXKlUak2n8bvPQL8MJB/4XDH/HzPOU8uC 1GZw== MIME-Version: 1.0 X-Received: by 10.58.85.161 with SMTP id i1mr2485381vez.97.1375954540726; Thu, 08 Aug 2013 02:35:40 -0700 (PDT) Received: by 10.52.38.134 with HTTP; Thu, 8 Aug 2013 02:35:40 -0700 (PDT) In-Reply-To: <20130807160528.GC13555@minime.local> References: <20130807160528.GC13555@minime.local> Date: Thu, 8 Aug 2013 13:35:40 +0400 Message-ID: Subject: Re: Sendmail-8.14.7 doesn't work with MS DNS in IPv4 network From: Pavel Timofeev To: Gregory Shapiro Content-Type: text/plain; charset=UTF-8 Cc: freebsd-stable@freebsd.org X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Aug 2013 09:35:42 -0000 I tried to revert mentioned patch, i.e. applied this --- sendmail/conf.c.orig 2013-08-08 12:28:40.000000000 +0400 +++ sendmail/conf.c 2013-08-08 12:31:17.000000000 +0400 @@ -4294,12 +4294,7 @@ #else /* (SOLARIS > 10000 && SOLARIS < 20400) || (defined(SOLARIS) && SOLARIS < 204) || (defined(sony_news) && defined(__svr4)) */ int nmaps; # if NETINET6 -# ifndef SM_IPNODEBYNAME_FLAGS - /* For IPv4-mapped addresses, use: AI_DEFAULT|AI_ALL */ -# define SM_IPNODEBYNAME_FLAGS AI_ADDRCONFIG -# endif /* SM_IPNODEBYNAME_FLAGS */ - - int flags = SM_IPNODEBYNAME_FLAGS; + int flags = AI_DEFAULT|AI_ALL; int err; # endif /* NETINET6 */ char *maptype[MAXMAPSTACK]; Sendmail started to work 2013/8/7 Gregory Shapiro : >> I found a problem in new FreeBSD 9.2-{BETA2,RC1} which uses Sendmail-8.14.7. >> If you try to send email from FreeBSD 9.2 in IPv4 network with MS DNS >> you won't receive it. >> But in same time email passes from FreeBSD 9.1-RELEASE which uses >> Sendmail-8.14.5. > > The recent release made the following change: > > --- sendmail/conf.c 25 Jan 2011 18:31:30 -0000 8.1168 > +++ sendmail/conf.c 5 Apr 2013 17:39:09 -0000 8.1182 > @@ -4726,7 +4726,12 @@ > #else /* (SOLARIS > 10000 && SOLARIS < 20400) || (defined(SOLARIS) && SOLARIS < 204) || (defined(sony_news) && defined(__svr4)) */ > int nmaps; > # if NETINET6 > - int flags = AI_DEFAULT|AI_ALL; > +# ifndef SM_IPNODEBYNAME_FLAGS > + /* For IPv4-mapped addresses, use: AI_DEFAULT|AI_ALL */ > +# define SM_IPNODEBYNAME_FLAGS AI_ADDRCONFIG > +# endif /* SM_IPNODEBYNAME_FLAGS */ > + > + int flags = SM_IPNODEBYNAME_FLAGS; > int err; > # endif /* NETINET6 */ > char *maptype[MAXMAPSTACK]; > > Which is described in this release note: > > Drop support for IPv4-mapped IPv6 addresses to prevent the MTA > from using a mapped address over a legitimate IPv6 address > and to enforce the proper semantics over the IPv6 > connection. Problem noted by Ulrich Sporlein. > > It looks like that SERVFAIL from Microsoft's DNS server is getting > in the way of that. I can look at adding this exception to > WorkAroundBrokenAAAA as a possibility for a future release. > > I'd also like to hear feedback on whether the above change (changing > getipnodebyname() flags from 'AI_DEFAULT | AI_ALL' to 'AI_ADDRCONFIG' went > too far and what the accepted norm is for getipnodebyname(). >