# Issues with glue records and resolving ip. However, believe they are set correctly

**URL:** <https://discourse.mailinabox.email/t/issues-with-glue-records-and-resolving-ip-however-believe-they-are-set-correctly/16166>\
**Category:** Help with Setup/Upgrade\
**Created:** [December 4, 2025, 5:34pm UTC](https://discourse.mailinabox.email/t/issues-with-glue-records-and-resolving-ip-however-believe-they-are-set-correctly/16166 "2025-12-04T17:34:03Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![peternemser](https://discourse.mailinabox.email/letter_avatar_proxy/v4/letter/p/e0b2c6/32.png) [@peternemser](https://discourse.mailinabox.email/u/peternemser)\
**Post date:** [December 4, 2025, 5:34pm UTC](https://discourse.mailinabox.email/t/issues-with-glue-records-and-resolving-ip-however-believe-they-are-set-correctly/16166/1 "2025-12-04T17:34:03Z")

</div>

I am having issues with my MIAB. My MIAB is all up to date with the latest versions. I I am 100% my configs are correct at gandi. Any ideas or suggestions? I did have a user recently complain of issues.

 ![Screenshot 2025-12-04 102135](https://discourse.mailinabox.email/uploads/default/original/2X/e/eac44269e4b8371d1fe6c405711bc34487c0c48e.png)

---

<div class="post-metadata">

**Author:** ![KiekerJan](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/kiekerjan/32/2339_2.png) [@KiekerJan](https://discourse.mailinabox.email/u/KiekerJan)\
**Post date:** [December 4, 2025, 7:36pm UTC](https://discourse.mailinabox.email/t/issues-with-glue-records-and-resolving-ip-however-believe-they-are-set-correctly/16166/2 "2025-12-04T19:36:44Z")

</div>

How are you hosting DNS? Are you having the box do it? Or an external DNS provider?  
Did you change anything recently? Are you using DNSSEC?  
Your box does not seem to respond to DNS queries.

(also, you forgot to censor your domain name a few times)

---

<div class="post-metadata">

**Author:** ![peternemser](https://discourse.mailinabox.email/letter_avatar_proxy/v4/letter/p/e0b2c6/32.png) [@peternemser](https://discourse.mailinabox.email/u/peternemser)\
**Post date:** [December 4, 2025, 7:50pm UTC](https://discourse.mailinabox.email/t/issues-with-glue-records-and-resolving-ip-however-believe-they-are-set-correctly/16166/3 "2025-12-04T19:50:53Z")

</div>

DNS is hosted locally on the box. I am using DNSSEC and its appears to be working (at the top of the screen shot.) I have been running mailinabox and keep upgrading for atleast 8 years…

---

<div class="post-metadata">

**Author:** ![KiekerJan](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/kiekerjan/32/2339_2.png) [@KiekerJan](https://discourse.mailinabox.email/u/KiekerJan)\
**Post date:** [December 4, 2025, 7:56pm UTC](https://discourse.mailinabox.email/t/issues-with-glue-records-and-resolving-ip-however-believe-they-are-set-correctly/16166/4 "2025-12-04T19:56:18Z")

</div>

Did you change anything recently? Can you check `sudo systemctl status nsd` and `sudo journalctl -u mailinabox`?

Something is not working right. If you let the box handle dns, the DANE TLSA record should also have been set.

Another thing you can try is disabling DNSSEC, then waiting a while and see if it works then.

---

<div class="post-metadata">

**Author:** ![peternemser](https://discourse.mailinabox.email/letter_avatar_proxy/v4/letter/p/e0b2c6/32.png) [@peternemser](https://discourse.mailinabox.email/u/peternemser)\
**Post date:** [December 4, 2025, 10:33pm UTC](https://discourse.mailinabox.email/t/issues-with-glue-records-and-resolving-ip-however-believe-they-are-set-correctly/16166/5 "2025-12-04T22:33:31Z")

</div>

Thank you - fixed it - something happened with the DNSSEC On gandi -that caused this issue. Not sure if some config changed or something in the infrastructure was updated. But this isssue popped up withing the last week; while I changed no config.

---

<div class="post-metadata">

**Author:** ![peternemser](https://discourse.mailinabox.email/letter_avatar_proxy/v4/letter/p/e0b2c6/32.png) [@peternemser](https://discourse.mailinabox.email/u/peternemser)\
**Post date:** [December 4, 2025, 11:31pm UTC](https://discourse.mailinabox.email/t/issues-with-glue-records-and-resolving-ip-however-believe-they-are-set-correctly/16166/6 "2025-12-04T23:31:49Z")

</div>

Unfortunetly, when I re-add the DNSSEC - It fails.

---

<div class="post-metadata">

**Author:** ![peternemser](https://discourse.mailinabox.email/letter_avatar_proxy/v4/letter/p/e0b2c6/32.png) [@peternemser](https://discourse.mailinabox.email/u/peternemser)\
**Post date:** [December 4, 2025, 11:47pm UTC](https://discourse.mailinabox.email/t/issues-with-glue-records-and-resolving-ip-however-believe-they-are-set-correctly/16166/7 "2025-12-04T23:47:19Z")

</div>

What are the downfalls of not running DNSSEC? Everything works when do not add the correct DNSSEC record with the public key on Gandi.

---

<div class="post-metadata">

**Author:** ![KiekerJan](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/kiekerjan/32/2339_2.png) [@KiekerJan](https://discourse.mailinabox.email/u/KiekerJan)\
**Post date:** [December 6, 2025, 8:33am UTC](https://discourse.mailinabox.email/t/issues-with-glue-records-and-resolving-ip-however-believe-they-are-set-correctly/16166/8 "2025-12-06T08:33:01Z")

</div>

Does it work if you reset the Gandi dnssec? I happened to have some dnssec issues myself yesterday, fixed it by removing and adding the dnssec key to my registrar.  
The above is reason not to use dnssec. The idea behind dnssec is that the dns queries retrieved from dns servers can be trusted. Then there is DANE which builds on dnssec, which theoretically improves email deliverability.  
All this to say there’s no hard requirement to use dnssec. I would enable it if possible because it usually doesn’t hurt.

---

<div class="post-metadata">

**Author:** ![peternemser](https://discourse.mailinabox.email/letter_avatar_proxy/v4/letter/p/e0b2c6/32.png) [@peternemser](https://discourse.mailinabox.email/u/peternemser)\
**Post date:** [December 6, 2025, 10:43pm UTC](https://discourse.mailinabox.email/t/issues-with-glue-records-and-resolving-ip-however-believe-they-are-set-correctly/16166/9 "2025-12-06T22:43:46Z")

</div>

There is some bug in the current version that is not liking the DNSSEC records being set with gandi. I have recreated this several times with the different algos - and causes issues and errors. So i am leaving this un-set for now.

---

<div class="post-metadata">

**Author:** ![system](https://discourse.mailinabox.email/uploads/default/original/2X/4/4d0933d13c456b7e57f296aa6cc344525b6f0c70.png) [@system](https://discourse.mailinabox.email/u/system)\
**Post date:** [December 13, 2025, 10:44pm UTC](https://discourse.mailinabox.email/t/issues-with-glue-records-and-resolving-ip-however-believe-they-are-set-correctly/16166/10 "2025-12-13T22:44:35Z")

</div>

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.