External DNS Server Responses are Different Between UDP and TCP

[This topic is intended to address a specific issue called out by the Exchange Server Analyzer Tool. You should apply it only to systems that have had the Exchange Server Analyzer Tool run against them and are experiencing that specific issue. The Exchange Server Analyzer Tool, available as a free download, remotely collects configuration data from each server in the topology and automatically analyzes the data. The resulting report details important configuration issues, potential problems, and nondefault product settings. By following these recommendations, you can achieve better performance, scalability, reliability, and uptime. For more information about the tool or to download the latest versions, see "Microsoft Exchange Analyzers" at https://go.microsoft.com/fwlink/?linkid=34707.]  

Topic Last Modified: 2007-03-16

The Microsoft Exchange Analyzer tool queries the Active Directory directory service to determine the value for the msExchSmtpExternalDNSServers attribute in the protocolCfgSMTPServer class for each Exchange Server object. The value of the msExchSmtpExternalDNSServers attribute, if set, specifies the address of the external Domain Name System (DNS) server that the Simple Mail Transfer Protocol (SMTP) Virtual Server Instance uses.

After retrieving the address of the primary external DNS server, the Exchange Analyzer attempts a DNS query against the configured DNS servers for each Active Directory directory service server. This connection is made by using a custom object processor that performs both a Transmission Control Protocol (TCP) and a User Datagram Protocol (UDP) name resolution request.

If both the TCP and UDP name resolution requests are successful, the Exchange Analyzer compares the returned responses of the successful requests. If the returned responses of the TCP and UDP queries are not the same, the Exchange Analyzer displays a warning.

This warning indicates that there may be external DNS server configuration issues that are affecting mail flow performance.

SMTP is the native mail protocol for mail submission and mail transport for Exchange Server. This means that clients use SMTP to send messages and Exchange servers use SMTP to deliver messages and message data.

For Exchange Server to deliver an outbound internet message via the SMTP service, DNS is employed by the following method:

  1. An internal user sends a message to a recipient in a remote domain.

  2. To determine if the recipient is local or remote, the SMTP virtual server on the sender's Exchange server uses internal transport functions to query the global catalog server for the recipient address. If the recipient address on the message is not in a recipient policy, it is not stored in Active Directory. Therefore, Exchange determines that the message is destined for a remote domain.

  3. If necessary, the Exchange server delivers the message to the appropriate SMTP virtual server.

  4. The SMTP virtual server uses its IIS metabase information to determine the method for delivering a message to a remote domain.

  5. The SMTP virtual server on the Exchange server then performs one of two actions:

    • Uses DNS to look up the IP address for the target domain, and then attempts to deliver the message.

    • Forwards the message to a smart host that assumes responsibility for the DNS resolution and delivery of the message.

To address this warning, see Microsoft Knowledge Base article 820284, "Mail may not be delivered to certain domains if Server OS is Windows Server 2003" (https://go.microsoft.com/fwlink/?linkid=3052&kbid=820284).

For more information about DNS and Exchange Server, see the following Microsoft Knowledge Base articles and WebCast: