DNS proxy returns "Server failed" response after upgrading to SGOS 6.5.5.1

Article Id: 168625

Status: Published

Updated On: 13-05-2017 11:52

Legacy Id: TECH245292

Products:

ProxySG Software - SGOS

Issue/Introduction:

If you use NSlookup (set DNS to the appliance IP address) to test in SGOS 6.5.4.4 you get the following response:

> set type=AAAA
> inoffice-mail-onmicrosoft-com.mail.protection.outlook.com

*** No IPv6 address (AAAA) records available for inoffice-mail-onmicrosoft-com.m
ail.protection.outlook.com
> inoffice-mail-onmicrosoft-com.mail.protection.outlook.com

If you do the same test in SGOS 6.5.5.1 you receive a 'server failed' message:

can't find inoffice-mail-onmicrosoft-com.mail.protection.outlo
ok.com: Server failed

Cause:

This issue was introduced in SGOS 6.5.5.1.

Resolution:

Upgrade to SGOS 6.5.7.5.

Workaround

If you cannot upgrade, install policy such as the following:

; Tab: [DNS Access Layer (1)]
<dns-proxy>
dns.request.name.exact="inoffice-mail-onmicrosoft-com.mail.protection.outlook.com" dns.respond(NOERROR)