Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

DNS errors related to DNSSec

We are beginning to receive DNS SERVFAIL errors and delayed or failing message delivery to domains implementing DNSSec. Are there any configuration settiings on the IronPort C Series to accomodate the increased payload size associated with DNSSec?

1 REPLY
New Member

Re: DNS errors related to DNSSec

hello,

We had a similar problem but that was caused by our upsteam DNS servers (running an outdated version of Bind).

We had the problem with all mail targeted to Sweden and where able to work around it by making an DNS exception rule that queried one of the .SE root servers directly for all .SE mail.

We are lucky enough to have brand new DNS servers in place now and that completely solved the problem for us.

Hope this helps!

Steven

246
Views
0
Helpful
1
Replies
CreatePlease to create content