How to add mx record for Dnsmasq-DNS?

[sjjh]

Quick question, what is the preferred way to add an MX record for an Dnsmasq-DNS host entry? It seems no GUI option is available. I did find an old github issue, which left me wondering if I should manually add it to the config file via ssh/cli, or call the dnsmasq command with the parameter "--mx" to creae a new entry, or if I might have overlooked an GUI option.

Background of the question: We are running a split DNS setup with nginx on the opnsense as reverse proxy and the postfix opnsense plugin for smtp forwarding. I cannot deliver email from outside, despite having entered the domain under postfix and I assume that the problem is related to the DNS A record of the internal domain, pointing to the reverse proxy.

Thanks for any help!

[sjjh]

Note to myself: after changing the postfix plugin configuration to not include a domain name as target, but an IP address, the email gets delivered. This doesn't answer my initial question, but makes it (for the moment) irrelevant.

[franco]

MX support for Dnsmasq was never asked for if I recall correctly. At some point it was added to Unbound.


Cheers,
Franco

[sjjh]

Thx for your reply! Dnsmasq was mentioned by fichtner in the linked github issue, but I also understood the PR as it the Web-GUI option was only added to Unbound.
Simon

[franco]

I can look into it, but only if you open a new ticket. I don't want to revive ancient tickets that have actual work done...


Cheers,
Franco

[sjjh]

Thx for the offer! To be honest, as it currently seems to work with the IP address specified in postfix the urgent need has declined (I'm rather wondering if there is a bug in the postfix plugin (DNS vs. IP), but that might also be my limited understanding of the whole matter).
I once heard the rumor, that dnsmasq would not be recommended anymore and unbound is the way to go. Thus, I'd understand if dnsmasq is out of focus. On the other hand, if it helps, I'm more than happy to create a new ticket.

Personally, I'm more urgent in need to find a solution for the https connection issues 

Cheers
Simon