HELO test

Hello,

We're being told by Senderbase that our HELO doesn't match our PTR record value.

Is there a site where I can see what the HELO string is for our email server?

Thanks in advance,

Steve
skbohlerAsked:
Who is Participating?
 
Chris DentConnect With a Mentor PowerShell DeveloperCommented:

Hey Steve,

There are a few web-based systems for checking those:

http://www.mxtoolbox.com/

The results are only valid if your server uses the same HELO string for Inbound Mail as Outbound (Exchange 2007, for example, does not).

If you can share the mail system name with us we can possibly tell you exactly where to look.

Chris
0
 
ZoooinkCommented:
check your authentication settings, and\or spam settings
0
 
skbohlerAuthor Commented:
Thanks for that website.

Where do I find our HELO string mentioned in it (our domain is groupoe.com)?

Steve
0
Cloud Class® Course: Certified Penetration Testing

This CPTE Certified Penetration Testing Engineer course covers everything you need to know about becoming a Certified Penetration Testing Engineer. Career Path: Professional roles include Ethical Hackers, Security Consultants, System Administrators, and Chief Security Officers.

 
MesthaConnect With a Mentor Commented:
Just telnet in to your server on port 25 and see what it says when you type helo.

telnet server 25

helo

Simon.
0
 
Chris DentPowerShell DeveloperCommented:

Hey Steve,

For the mxtoolbox, select Diagnostics and pop your mail server name in.

If the outbound server is the same as your inbound server (mail.groupoe.com) then it's fine.

There's a bit of a catch there because this tests the name as if the mail was inbound which doesn't necessarily have to match outbound.

Chris
0
 
greatbayCommented:
Just telnet in to your server on port 25 and see what it says when you type helo.
This was a good idea.

Senderbase.org said the same thing. "HELO doesn't match our PTR record value.".

It turned out to be our firewall.

Inside the firewall I was getting the following:
220 mail.treadstone.com Treadstone Distrubutors EMAIL Fri, 24 Dec 2010 15:31:14-0500
helo
250 mail.treadstone.com Hello [192.168.1.14]
quit
221 2.0.0 mail.treadstone.com Service closing transmission channel
Connection to host lost.
C:\>

However, outside the firewallI was getting:
220 mail.treadstone.com Service ready
helo testdomain.com
250 Requested mail action okay, completed
quit
221 Closing connection. Good bye.
Connection to host lost.
C:\>

My firewall was set to hide mail server replies to help protect it from attacks. I unchecked it.

Now I'm seeing:
220 mail.treadstone.com Treadstone Distrubutors EMAIL Fri, 24 Dec 2010 16:11:31-0500
helo testdomain.com
250 mail.treadstone.com Hello [210.121.11.143]
quit
221 Closing connection. Good bye.
Connection to host lost.
C:\>
0
 
greatbayCommented:
Changing my HELO string to match the FQDN did work.

After three days, senderbase upgraded my reputation score to NEUTRAL.

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.