The second part is kind of a long story. We have 2 T-1 circuits comeing
into our building. They are from separate providers, Winstar and Focal.
We have implemented a device from Radware canlled a linkproof that will
load balance incoming and outgoing traffic. The way it load balances
incoming traffice is by having our authoritative DNS (Winstar) create NS
records that forward any requests to the LinkProof, who in turn hands
out 2 A records. One for the Winstar circuit and one for the Focal
Ciruit. This the reason that the dnsstuff.com report said my DNS server
is down. It's not down, it just doesn't respond the same way a DNS
server would expect.

No, it is down. If it doesn't respond the way that a DNS server would expect, it won't work with DNS servers, and therefore isn't DNS. <G>


If you don't believe me -- are you aware that any time that anyone tries sending mail to @www2.aaos.org, their DNS server tries looking up the MX record for www2.aaos.org, and your DNS server does not respond? It (or a firewall) just drops the packets, essentially saying "This server is down."

This *definitely* is bad behavior. Even if it is 100% intentional, it prevents mail from getting to you, and wastes bandwidth. I'm guessing that wasn't what was intended. :)


-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to