Getting DNS Errors RSS Back to forum
@jean.davis:
Hello jean.davis,
Most online DNSBL services refuse to reply to queries (i.e. the queries time out) that originate from public DNS resolvers, such as ISP DNS resolvers or Google's DNS servers, so you should not use them in ORF - not even as a "fallback" option. If you want to use external servers, make sure that they comply with ORF's DNS requirements: https://vamsoft.com/support/docs/orf-help/5.4.1/adm-dns
Found the problem to be DNS Rebinding Attack Prevention on our Sonicwall firewall. Sorry to raise concerns here.
Thank you for the update Jean. I am glad to hear that you have found the source of the issue.
I'm getting a bunch of DNS errors now for months. I didn't used to get them so was wondering if anyone else has the issue. All are similar to the one below. I have changed the DNS in orf to use external dns servers and our ISP's dns server but getting the same issue. I have increased to time to 15 seconds for timeout and still getting them. DNS is working as the orf server is able to nslookup these urls.
--------------------------------------------------------------------
C:\Windows\system32>nslookup dnsbl.sorbs.net
Server: local dns server
Address: 10.0.0.x
Non-authoritative answer:
Name: dnsbl.sorbs.net
Addresses: 113.52.8.153
208.43.110.204
113.52.8.154
208.43.139.188
113.52.8.155
C:\Windows\system32>nslookup 74.105.199.198.dnsbl.sorbs.net
Server: local dns server
Address: 10.0.0.x
*** local dns server can't find 74.105.199.198.dnsbl.sorbs.net: Non
-existent domain
------------------------------------------------------------
Error in ORF
------------------------------------------------------------
-- EVENT SUMMARY --
Time: 4/12/2018 14:18:48 GMT-0400 Eastern Daylight Time
Sender Email:
Recipient Email: lg******@***.org
Related IP: 204.62.115.51
Action: (not available)
Email Subject: (not available)
-- EVENT MESSAGE --
DNS error. Test: "DNSBL: HOSTKARMA", built-in DNS resolver, domain: "51.115.62.204.hostkarma.junkemailfilter.com", record type: A. DNS timeout error.
-- EVENT DETAILS --
Filtering Point: Before Arrival
Event Class: System Message
Severity: Warning
Server: *******
Event Source: MSEXCHANGE
HELO Domain: mail-relay-101.3.basecamp.com
Message ID: (not available)
Log Mode: Verbose
ORF Version: 5.4.1 REGISTERED
-------------------------------------------------------------------------------
Any help would be helpful. Thanks.