OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: check_policy_server not alternating between addresses?

From: Wietse Venema (wietseporcupine.org)
Date: Sat Dec 08 2007 - 07:47:36 CST


Per Jessen:
> Per Jessen wrote:
>
> > Robert Felber wrote:
> >
> >> Which OS do you use?
> >> I have found at least one OS[1] which returns a sorted output when
> >> using getaddrinfo(3).
> > [snip]
> >> 1) https://bugs.launchpad.net/debian/+source/glibc/+bug/138466
> >
> >
> > Without having looked at this in detail, I'd say this bug is exactly
> > what I'm seeing. I'm using openSUSE 10.1/2/3 (see my previous post,
> > which also identified glibc as being the problem).
> >
>
> Just a brief follow-up - I've been reading quite a bit about
> getaddrinfo() and RFC3484 rule 9. There's a lengthy discussion here:
>
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=438179
>
> AFAICT, the conclusion is that round-robin load distribution does not
> work when the application is using getaddrinfo().

Postfix can do many things, but it can't undo damage done by the
platform. getaddrinfo() is the standard function for host to address
lookup. gethostbyname() is obolete.

You can compile Posfix in "obsolete" mode with:

    $ make makefiles CCARGS=-DNO_IPV6

However there is no guarantee that this option will forever be
available. It is a development tool.

        Wietse