How to work around missing AAAA (ipv6) record in Exchange 2007

Posted on 2009-04-22
Last Modified: 2013-12-06
I have a client running Red Hat Enterprise Linux v4 for web and email services. Their accountants have just implemented Exchange 2007 on Windows Server 2008, and have ipv6 enabled.

My client can send the accountants emails without issue. Unfortunately, when the accountantd send a message to my client, DNS resolution fails in ipv6, but does NOT fall back to ipv4. The accountants' tech guy says:

> > It seems our server can ping,
> >
> > However when I do a wireshark capture and send an e-mail the DNS resolve seems to fail.
> >
> > I think this is because your server is responding Server Failure for your AAAA (IpV6)
> > record, and as we are using exchange 2007 and Server 2008, ipv6 name resolution is
> > supported and enabled by default - and because it is returning failure instead of missing
> > record,  exchange doesn't move on to ipV4 (while windows does).

Our DNS is handled by PlanetDomain, with only provides ipv4, so my guess is that something needs to be done by the accountants on Windows 2008 and/or Exchange 2007 to allow them to send out emails to my client's server. Alternatively, perhaps we need to make a change at the RHEL end.

Has anybody got any suggestions as to what to try?

Question by:davidiwharper

    Author Comment

    This could well be a problem with RHEL 4. I had the accountants send another client a test message. The other client is running Windows SBS 2003, also with PlanetDomain and ipv4 only.

    From memory, the RHEL server is running TinyDNS, not BIND.
    LVL 70

    Expert Comment

    by:Chris Dent

    Why can't they just disable IPv6? It's not like it's a requirement (for either Windows or Exchange), and if the infrastructure doesn't support that it's far more of a hindrance than an advantage.


    Author Comment

    Thanks for the input. They don't want to disable IPv6 at all. Given the small size of the organisation, IPv6 is (IMHO) just a toy right now... but try telling them that.
    LVL 70

    Accepted Solution


    It's discussed here under "5.  Operational Experience":

    They're right that the DNS server shouldn't return SERVFAIL, however... If you don't manage the DNS service yourself then there might not be a great deal you can do about it.

    You might raise it with PlanetDomain and see what they say.

    In the meantime the sender could do any of...

    1. Disable IPv6 (shouldn't have to, but...)
    2. Create a Send Connector for your domain, directing mail at your mail servers, bypassing the MX lookup
    3. Create a fake version of your domain internally with correct MX records on a DNS server that does support IPv6


    Author Closing Comment

    Thank you, the Send Connector worked a charm.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Why do Marketing keep bothering you?

    Is your marketing department constantly asking for new email signature updates? Are they requesting a different design for every department? Do they need yet another banner added? Don’t let it get you down! There is an easy way to manage all of these requests...

    Learn more about how the humble email signature can be used as more than just an electronic business card. When used correctly, a signature can easily be tailored for different purposes by different departments within an organization.
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now