Getting DNS Errors RSS

1

I'm getting a bunch of DNS errors now for months. I didn't used to get them so was wondering if anyone else has the issue. All are similar to the one below. I have changed the DNS in orf to use external dns servers and our ISP's dns server but getting the same issue. I have increased to time to 15 seconds for timeout and still getting them. DNS is working as the orf server is able to nslookup these urls.
--------------------------------------------------------------------
C:\Windows\system32>nslookup dnsbl.sorbs.net
Server: local dns server
Address: 10.0.0.x

Non-authoritative answer:
Name: dnsbl.sorbs.net
Addresses: 113.52.8.153
208.43.110.204
113.52.8.154
208.43.139.188
113.52.8.155

C:\Windows\system32>nslookup 74.105.199.198.dnsbl.sorbs.net
Server: local dns server
Address: 10.0.0.x

*** local dns server can't find 74.105.199.198.dnsbl.sorbs.net: Non
-existent domain
------------------------------------------------------------
Error in ORF
------------------------------------------------------------
-- EVENT SUMMARY --
Time: 4/12/2018 14:18:48 GMT-0400 Eastern Daylight Time
Sender Email:
Recipient Email: lg******@***.org
Related IP: 204.62.115.51
Action: (not available)
Email Subject: (not available)

-- EVENT MESSAGE --
DNS error. Test: "DNSBL: HOSTKARMA", built-in DNS resolver, domain: "51.115.62.204.hostkarma.junkemailfilter.com", record type: A. DNS timeout error.

-- EVENT DETAILS --
Filtering Point: Before Arrival
Event Class: System Message
Severity: Warning
Server: *******
Event Source: MSEXCHANGE
HELO Domain: mail-relay-101.3.basecamp.com
Message ID: (not available)
Log Mode: Verbose
ORF Version: 5.4.1 REGISTERED
-------------------------------------------------------------------------------

Any help would be helpful. Thanks.

by jean.davis 4 months ago
2

@jean.davis: Hello jean.davis,

Most online DNSBL services refuse to reply to queries (i.e. the queries time out) that originate from public DNS resolvers, such as ISP DNS resolvers or Google's DNS servers, so you should not use them in ORF - not even as a "fallback" option. If you want to use external servers, make sure that they comply with ORF's DNS requirements: https://vamsoft.com/support/docs/orf-help/5.4.1/adm-dns

by Daniel Novak (Vamsoft) 4 months ago
(in reply to this post)

3

The error is with the builtin btw.

by jean.davis 4 months ago
4

Found the problem to be DNS Rebinding Attack Prevention on our Sonicwall firewall. Sorry to raise concerns here.

by jean.davis 4 months ago
5

Thank you for the update Jean. I am glad to hear that you have found the source of the issue.

by Daniel Novak (Vamsoft) 4 months ago

New comment

Fill in the form below to add a new comment. All fields are required. If you are a registered user on our site, please sign in first.

Nickname:
Email address (will not be published):
Your comment:

ORF Technical Support

Configuring, installing and troubleshooting ORF.

News & Announcements

Your dose of ORF-related news and announcements.

Everything but ORF

Discuss Exchange and system administration with fellow admins.

Feature Test Program

Feature Test Program discussion. Membership is required to visit this forum.

ORF Beta

Join the great bug hunt of the latest test release.

Customer Service

Stay Informed