cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1032
Views
0
Helpful
1
Replies

DNS errors related to DNSSec

rrhodes
Level 1
Level 1

We are beginning to receive DNS SERVFAIL errors and delayed or failing message delivery to domains implementing DNSSec. Are there any configuration settiings on the IronPort C Series to accomodate the increased payload size associated with DNSSec?

1 Reply 1

steven_geerts
Level 1
Level 1

hello,

We had a similar problem but that was caused by our upsteam DNS servers (running an outdated version of Bind).

We had the problem with all mail targeted to Sweden and where able to work around it by making an DNS exception rule that queried one of the .SE root servers directly for all .SE mail.

We are lucky enough to have brand new DNS servers in place now and that completely solved the problem for us.

Hope this helps!

Steven

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: