[Dnsmasq-discuss] Wildcard / catch all Mail eXchanger (MX)

Matus UHLAR - fantomas uhlar at fantomas.sk
Sat May 8 12:16:22 UTC 2021


Hello,

On 07.05.21 22:13, Petr Menšík wrote:
>I don't think there exists way to do what you requested using dnsmasq.
>
>However, it might work to DNAT rule outgoing SMTP connections to your
>smarthost, moving this decision from DNS to IP firewall/NAT. Could be
>done only on some gateway of course.
>
>But I think your users would not like such redirection, I think blocking
>outgoing ports and requesting manual configuration from clients might be
>more acceptable. Just my 2 cents.

+1 from me.

>On 5/7/21 4:05 PM, Mark wrote:
>> I know there are MX related configuration options which can be used in
>> dnsmasq.conf (mx-host, mx-target, selfmx and localmx) - however, none of
>> them appear to be able to deliver the specific functionality I'm looking
>> for...here's what I'm trying to do...
>>
>> I have an internal network that is using dnsmasq for name resolution and
>> some (not all) hosts are using it for DHCP.
>>
>> I would like dnsmasq to deliver a single MX record back to MX queries from
>> hosts on my internal network no matter what mail domain is being included
>> in their MX query - i.e. a 'wildcard MX' (which I'll point to my SMTP
>> smarthost).
>>
>> The description of the 'mx-host' option in dnsmasq's man page makes
>> reference to this type of requirement ("for directing mail from systems on
>> a LAN to a central server") - however, dnsmasq still appears to need to be
>> configured to provide responses only for specifically mail domains
>> ("hostname") MX requests.
>>
>> Essentially, I believe I want to specify a wildcard as the "hostname"
>> (really "mail domain").
>>
>> I wondered if it's possible to deliver this functionality with the current
>> dnsmasq?

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I'm not interested in your website anymore.
If you need cookies, bake them yourself.



More information about the Dnsmasq-discuss mailing list