We had been facing a similar issue after we put or WIN2K3 AD DNS online. After a lot of digging around by a good friend of mine he found these articles related to WIN2K3 DNS having EDNS0 turnded on by default and a PIX that has an older version of OS.
1. Microsoft KB article 828731 2. http://homepages.tesco.net/~J.deBoynePollard/FGA/dns-edns0-and-firewalls.html 3. http://myitforum.techtarget.com/articles/16/view.asp?id=7491 Hope this might help Neil Olson IT Department Grand View College Des Moines, Iowa ---------- Original Message ---------------------------------- From: "R. Scott Perry" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Wed, 08 Dec 2004 10:06:42 -0500 > >> We're running Active Directory on Windows 2003 Servers. 99% of the >> time, all is well. Occassionally we seem to be pulling erroneous MX >> information. When I do an nslookup type=MX from the Imail server, I get >> the correct information... most of the time. The erroneous server is >> always another server that's located at the provider for the company in >> question. I check their DNS server and can find no problems... >> >> I even had one where we'd apparently come up with the IP of an >> internal POP server for earthlink, instead of one of their outward facing >> MX servers.... > >Given what you describe, it sounds like IMail is getting the A record >rather than the MX record. However, if this is the case, the "nslookup >type=MX" should always produce the correct results. Specifically, if the >MX record doesn't exist, IMail tries the A record (per the RFCs). > >Note that if you have more than one DNS server listed in the IMail SMTP >settings, you should remove all but one. Otherwise, if the primary DNS >server is failing, when IMail sees the failure for the MX record, it could >cause IMail to switch to the secondary -- which will report the correct A >record (which is not what you want). > > -Scott >--- >Declude JunkMail: The advanced anti-spam solution for IMail mailservers >since 2000. >Declude Virus: Ultra reliable virus detection and the leader in mailserver >vulnerability detection. >Find out what you've been missing: Ask for a free 30-day evaluation. > > >---- >This outgoing message is guaranteed to be authentic by Message Level users. >Guarantee the authenticity of your email @ http://www.messagelevel.com. >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html >List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ >--- >[This E-mail scanned for viruses by Declude Virus] > > --- [This E-mail scanned for viruses by Declude Virus] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
