<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>
<br><div>
<style><!--
.ExternalClass .ecxhmmessage P
{padding:0px;}
.ExternalClass body.ecxhmmessage
{font-size:10pt;font-family:Tahoma;}
--></style>
<div dir="ltr">
We're seeing email failures to outlook.uga.edu. <br>dig uga.edu +nssearch shows only dns3.uga.edu responds with an soa record.<br><br>and <br>dig -t mx outlook.uga.edu @dns3.uga.edu returns an mx record.<br>outlook.uga.edu. 86400 IN MX 10 707341637.mail.outlook.com.<br><br>
<p class="ecxMsoNormal">And we see a problem with the uga.edu nameservers when attempting to get an MX record. </p><p class="ecxMsoNormal"><br></p><p class="ecxMsoNormal">3 of the 4 nameservers don't seem to be communicating with the world ... but one, dns3, is.<br></p><p class="ecxMsoNormal">
</p><p class="ecxMsoNormal">There are 4 name servers defined as authorities for uga.edu.<br></p>
<p class="ecxMsoNormal"> </p>
<p class="ecxMsoNormal">dns1.uga.edu.</p>
<p class="ecxMsoNormal">dns2.uga.edu.</p>
<p class="ecxMsoNormal">dns3.uga.edu.</p>
<p class="ecxMsoNormal">dns4.uga.edu.</p>
<p class="ecxMsoNormal"> </p><p class="ecxMsoNormal">It has been suggested that an AD server is consistently getting correct answers ... ie, is cycling through all 4 nameservers and coming up with the mx record ... but BIND servers are not consistently getting an answer. <br></p><p class="ecxMsoNormal">Confused about this. I believe I've read that resolv.conf will only take the 1st 3 nameservers in a search list ... but doubt that's really related to this issue.</p><p class="ecxMsoNormal">Guessing that during a recursive search that goes through the TLD nameservers info about all 4 of the uga.edu nameservers is passed along to whatever recursive server is performing the query. Then I would expect that server to try all the nameservers in the list. In fact, a test I've run seems to confirm this. Can anyone offer any other thoughts on this? Any reason this MX record check might fail on BIND servers? Obviously the fact that 4 nameservers are delegated authority for the domain and only 1 of them can be reached is an issue.<br></p>
<p class="ecxMsoNormal"><br></p>
<p class="ecxMsoNormal"> </p><p class="ecxMsoNormal">Thanks,<br></p><p class="ecxMsoNormal">Marty</p><p class="ecxMsoNormal"><br></p><p class="ecxMsoNormal"><br></p><p class="ecxMsoNormal"><br></p>
<p class="ecxMsoNormal"> </p>
<br> </div></div> </div></body>
</html>