On Sat, May 22, 2010 at 6:42 AM, Chris Geldenhuis <chris.gelden at iafrica.com> wrote: > > The records that Richard was talking about was not that of your actual > mail, but the Domain Name Service (DNS) records required to find the > destination server and for that server to look up your server to verify > that the mail comes from a valid address. Right so far ... > I recall a discussion earlier > this month about the root DNS servers being updated to a new version of > DNS software that would increase the size of the DNS records. This would > then take a while to filter through the "tree" of DNS servers and > eventually software that could not handle these larger records would fail. You're thinking of the DNSSEC changes to add security information to the packets. That should only affect software that actually asks for DNSSEC packets, which presumably excludes any software that isn't prepared to handle those responses. I'm not familiar with the qmail bug that was previously mentioned, but from the description it appears to be related to CNAME records, not to DNSSEC.