Solved

Secondary MX records

Posted on 2011-02-15
14
464 Views
Last Modified: 2012-06-27
Kind of stumped here.  How long does it take for a mail server such as Yahoo, Hotmail, or Gmail to attempt mail delivery to secondary MX Records?

I have set up a backup exchange server for my my domain.  I have tested it using telnet and mail flows perfectly.  I have used Wormly  to test mail directly to the secondary server, and success!  I have my MX setup like this:

mail.domain.com   priority 5
mail2.domain.com  priority 10

I felt confident that if my Primary server went down, the secondary would collect the mail until the primary came back on line and requested the mail from the secondary (SMTP Connector).  So I decided to test it.  I shut down my primary mail server and started sending emails.  I sent them from all the previously mentioned servers and nothing.....  I waited 2 hours and the mail still did not reach the secondary server.  I did not receive any NDR's.  What am I missing here?

Thanks is advance
0
Comment
Question by:kwilliams123
  • 6
  • 5
  • 2
  • +1
14 Comments
 
LVL 76

Expert Comment

by:Alan Hardisty
Comment Utility
How long after creating the MX record did you start testing?

Bear in mind that MX records may take 24-48 hours to be updated in cache for most DNS servers, so they may be lagging behind a little.
0
 

Author Comment

by:kwilliams123
Comment Utility
The MX records have been in place for about 2 weeks in preparation.
0
 
LVL 7

Expert Comment

by:OctInv
Comment Utility
This is probably a stupid question, but have you set up the corresponding A record for mail2.domain.com?
0
 

Author Comment

by:kwilliams123
Comment Utility
Totally not a stupid question.  You never know..  However, yes mail2.domain.com does have a corresponding A record created the same day the MX was created.
0
 
LVL 76

Expert Comment

by:Alan Hardisty
Comment Utility
Can't confirm what the major players do in terms of secondary MX records.  Have you tested from other places?
0
 
LVL 7

Expert Comment

by:OctInv
Comment Utility
what happens if you test DNC with nslookup?

nslookup
server 8.8.8.8
set type=mx
domain.com

What records come back?
0
 
LVL 7

Expert Comment

by:OctInv
Comment Utility
Sorry, DNC should read DNS!!
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 

Author Comment

by:kwilliams123
Comment Utility
Wow, thanks folks..

alanhardisty:  No, but will after this post.  Just found it odd that out of 4 of the major players, I got nada..

Octlnv:  nslookup returns

domain.com    MX preference = 5, mail exchanger = mail.domain.com
domain.com    MX preference = 10, mail exchanger = mail2.domain.com

0
 
LVL 7

Expert Comment

by:OctInv
Comment Utility
So maybe this is an internal issue. What mail servers are you using? Are there any emails stuck in queues?
0
 
LVL 5

Expert Comment

by:alreadyinuse
Comment Utility
You probably already checked but it is a very good idea to make sure you have a .ptr or RR record for your A record to which you MX dns record points to.
0
 

Author Comment

by:kwilliams123
Comment Utility
alanhardisty:  I have now tried Godaddy, Concentric, and I pointed Experts Exchange to the address and did not receive notification that alreadinuse posted.

alreadyinuse:  Done when MX and A records were created.  At this point, I left the server down over night and sent more emails and 0 have hit the secondary server.  I really don't get it.  The only thing I can think of at this point is that in exchange, under the recipient policy I do NOT have the domain checked as "this server is authorative for this domain".  Does anyone think that might be the issue?  
0
 
LVL 7

Accepted Solution

by:
OctInv earned 500 total points
Comment Utility
Like I said, this may be an internal issue. Can you give more information on your Exchange structure: Version, topology...

Thanks
0
 

Author Comment

by:kwilliams123
Comment Utility
Sure.  Exchange 2003 SP2.  The flow for the secondary is this.  Internet - Cisco ASA - Barracuda Spam and Antivirus - Exchange.  The exchange server is a seperate domain, backup.com.  I have configured a SMTP connector to queue all mail for remote delivery with the address space of domain.com cost of 1.  It works.  Like I said previously, sending mail directly to both the IP and the A record deliveres directly to the SMTP connector queue.  So that tells me that The ASA, Barracuda, and Exchange server aspect of the problem are functioning accurately.  However, I could be wrong.  It seems logical.  What other information do you need?
0
 

Author Comment

by:kwilliams123
Comment Utility
Figured it out..  The problem was when I shut down the primary exchange server I didn't shut down the primary Barracuda...  The barracuda was just piling up the messages in a queue until the primary came back online!!
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

Easy CSR creation in Exchange 2007,2010 and 2013
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager
how to add IIS SMTP to handle application/Scanner relays into office 365.

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now