Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[Archive] Mail takes 30 seconds to send - enable ident reset

0

0

Article ID: KB6766 KB Last Updated: 30 Aug 2010Version: 3.0
Summary:
Mail takes 30 seconds to send - enable ident reset
Symptoms:
Mail relay to server on untrust side Mail server on untrust side Mail takes 30 seconds to send With NAT, all addresses from trust side gets translated to untrust interface address.  Ident-reset will send a reset to all ident packets where the source address to the Mail server is the untrust interface address.  If a host has a MIP assigned to it, ident-reset will not work in this scenario
Solution:

Enable ident-reset on the untrust side.

Here is the problem or goal:

  • Mail takes 30 seconds to send

Problem Environment:

  • Mail relay to server on untrust side
  • Mail server on untrust side

Causes of this problem:

  • Mail server does ident checking, and is waiting for name server authentication

Additional Information:

With NAT, all addresses from trust side gets translated to untrust interface address.  Ident-reset will send a reset to all ident packets where the source address to the Mail server is the untrust interface address.  If a host has a MIP assigned to it, ident-reset will not work in this scenario

Applicable Products:

  • NetScreen-5
  • NetScreen-5XP
  • NetScreen-10
  • NetScreen-25
  • NetScreen-50
  • NetScreen-100
  • NetScreen-204
  • NetScreen-208
  • NetScreen- 500
  • NetScreen-1000

Applicable ScreenOS:

  • 2.01
  • 2.10
  • 2.50
  • 2.6.0
  • 2.6.1
  • 2.7.1
  • 2.8.0
  • 3.0.0
  • 3.0.1
  • 3.0.2
  • 3.1.0


Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search