Reverse DNS causing gray listing of incoming emails

Posted on 2010-11-16
Last Modified: 2012-05-10
I have a client that is not receiving emails from some of the bigger providers like yahoo and hotmail because their IP address is being perceived as a problem.  The problem stems from the fact that when you do an NSLOOKUP on their Exchange server's IP address, it doesn't point back to their mailserver.

If you NSLOOKUP it resolves correctly to their IP address, say as an example.

However, if you NSLOOKUP it does NOT resolve back to  It goes to

The emails is obviously hosted internally on an Exchange Server 2003.  The ISP is AT&T who claims that they can't help because we don't use their email services.  Network Solutions claims they don't provide Reverse DNS help, either.

To whom should I be asking for a solution?  AT&T, Network Solutions, or is this something I should configure on my own Exchagne server?  Until I can get to point back to, bigger email tubes are going to continue to bounce emails that try to reach my exchange server.

Question by:IndyNCC
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3

Accepted Solution

losip earned 500 total points
ID: 34150710
It is the owners of the subnet who are the only people who can make the reverse DNS match the host name.  This is normally the ISP - ATT.  However, this particular address is part of a static 8 addresses issued to Marcus Law Firm LLP, i.e. which seems to indicate to me that, if that is your client, then THEY own the address range and ATT should be able to set up a proper reverse DNS.  You could try contacting and see if you can get any satisfaction.  The registrar, Network Solutions will not be able to help.

The other approach is to get on Hotmail and Yahoo's white list.  I have managed this with some organisations for the same reason but have never had cause to try either of those organizations. I suspect Yahoo will be uncooperative but you need to try to get on the same list that they already have most of the world's ISPs on.

Expert Comment

by:Dan Arseneau
ID: 34151936
Once you have a rDNS record, you shouldn't be further concerned about lookups.  As losip explained, the owner of the subnet (ATT) should be able to provide you the reverse record for your MX record.  Any host that provides DNS services will not argue when you ask them for a reverse entry.  It's common sense that if you have an MX record, you will be asking for an rDNS record.

Expert Comment

ID: 34153082
The trouble is that the MX record will be on DNS servers for the domain name which are not necessarily owned or controlled by the ISP but are more likely controlled by you.

The reverse DNS record is (nearly) always on the DNS servers operated by the ISP because it is they that own the subnet.  Delegation of the subnet can only be done with the goodwill of the ISP and their processes often make this difficult.

The differing administration of the domain MX record and the reverse DNS record often means it takes some effort to get this organised.
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!


Author Comment

ID: 34155832
Thank you.  I will contact AT&T today to see what I can get done.  I will report back.

Author Comment

ID: 34158582
I was directed, by AT&T to a DNS request form at  However, I wasn't given much instruction by the tech I was talking to so I hope I filled it out correctly.  i didn't know whether I was supposed to call it a Reverse DNS or a Reverse Delegation so I went with the Reverse DNS and filled out the form accordingly.  I suppose I now have to wait 72 hours to see if it propogates?


Expert Comment

ID: 34158677
I'm glad you're making progress.  As I understand it (, Reverse DNS is where AT&T put the required entry on their DNS servers and Reverse DNS Delegation is where they pass it over to you to create and maintain the rDNS entry.  If this is right, then Reverse DNS should do you fine.

Author Comment

ID: 34161048
The form worked and my nslookup now resolves both forward and reverse.

Thanks for your help!

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

MS Outlook is a world-class email client application that is mainly used for e-communication globally.  In this article, we will discuss the basic idea about MS Outlook, its advanced features, and types of MS Outlook File formats.
This article will help to fix the below error for MS Exchange server 2010 I. Out Of office not working II. Certificate error "name on the security certificate is invalid or does not match the name of the site" III. Make Internal URLs and External…
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
Suggested Courses

630 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question