Solved

Email Rejections due to Invalid Reverse PTR Record

Posted on 2009-03-31
5
1,613 Views
Last Modified: 2013-11-30
We just purchased a Barracuda SPAM Filter to replace our old eSOFT Spam Filter appliance.  The SPAM Filter inspects messages and forwards them to our internal Exchange Server.  The SPAM FIlter sites on our LAN along with our Exchange Server, and both sit behind our Corporate Firewall.

Needless to say, every since I switched to the Barracuda, our email's are getting rejected by some Domains. For example, we can't send to "Comcast.net".  In our SMTP log on our Exchange server, I see an error regarding an invalid Reverse PTR record.   Our ISP hosts our DNS for our mail server, and I had them switch the hostname to resolve to the hostname of our Barracuda SPAM filter.  However, I still can't sent to comcast.  The emails are sitting in our Exchange server queue for up to 24 hours, and eventually we receive an NDR.  

Finally, according to some of the free DNS online tools, my MX record seems to resolve properly.  Any suggestions?
0
Comment
Question by:elecdave
  • 3
5 Comments
 
LVL 12

Accepted Solution

by:
Steve earned 250 total points
ID: 24036247
You need to get your ISP to check the 'in-arpa' addresses for you.. you'll find that even though they've changed your DNS to resolve correctly.. the reverse DNS is still setup to the wrong name.. once they change that and restart their DNS it'll be fine..

0
 

Author Comment

by:elecdave
ID: 24037466
PsychoFelix,

Thanks for your quick response.  Meanwhile, I'll contact our ISP this morning, but their's one other piece to this puzzle.  When I implemented the Barracuda, our internal Private IP Addressing scheme changes.  We went from a 169.254.92.0 to a 192.168.1.0  for our LAN.   Our internal DNS servers are are only servicing our AD domain, and they are acting as DNS forwarders for all external resolution.  You don't think that our internal DNS servers have anything to do with this issue, do you?  
0
 
LVL 65

Assisted Solution

by:Mestha
Mestha earned 250 total points
ID: 24039500
Internal DNS would have nothing to do with this. It is purely down to how your server is seen by the internet. PTR records and preferably how the appliance announces itself, the SMTP banner or EHLO/HELO banner.

Simon.
0
 

Author Comment

by:elecdave
ID: 24060999
I found my solution.  The issue was related to our Cisco ASA.  For some reason, the ASA NAT policies were not functional any longer.  We had seperate NAT policies for SMTP, POP and HTTS. For some reason STMP was redirecting out of hte default interface for packets that weren't specific to the NAT policies. Needless to say, we resolved the issue on our ASA and all is well.  Thanks again for your help.
0
 

Author Closing Comment

by:elecdave
ID: 31565173
Thanks again for all your help.  Since neither issue was correct, I split the points between the two experts who replied.  If I could, I'd give you both a million points just for your quick responses!!!
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Assistance Reading mail headers 9 40
File encoding? 3 55
SMTP Service 9 37
Best secure sending email service 1 49
The most common mistakes I hear or read about email usually begin with people talking about POP3 and IMAP, so let's clear those off the table: POP3 and IMAP have absolutely nothing to do with sending or receiving email, so get that notion out of you…
Hello Friends, My friends and relatives always ask me how to delete all the various types of emails at once in our g-mail  or windows live account.  So I researched this topic to find a unique solution to this query.  Here it is for those who do …
Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now