Solved

Reverse DNS

Posted on 2011-02-24
7
469 Views
Last Modified: 2012-05-11
We have 3 main sites each with there own Exchange 2010 server, MX records are pointing to one site which collects mail for multiple domains (different sub companies) and then distributes them to the corresponding mailboxes, this was found to be the best setup as users from the sub companies are spread across different sites..
Each site though sends out using it's own exchange server, the problem we are getting is with reverse DNS which resolves to the one site so we are getting bounce backs from certain mailservers as the rDNS does not correspond with the sending site.
The way I see it is that I can't have one A record pointing to different ip's as when I enter this as an MX record mail will be sent to both, great for load balancing but not for our set up were we only want one server to receive external mail. how would I go about setting up multiple ip's for a single MX record?
0
Comment
Question by:carn
  • 4
  • 2
7 Comments
 
LVL 15

Expert Comment

by:JBond2010
ID: 34969168
0
 
LVL 8

Accepted Solution

by:
Saineolai earned 125 total points
ID: 34969191
The reverse dns lookup should be for the fully qualified domain name of the sending Exchange server's smtp service.

Ensure that reverse lookup for each IP address matches the fully qualified domain name on each server.
0
 

Author Comment

by:carn
ID: 34969323
Thanks saineolai don't know why I was thinking it had to match the MX? when you say FQDN are we talking internal or external ie. when I telnet to our mail server on port 25 it responds with it's internal domain name.
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 8

Expert Comment

by:Saineolai
ID: 34969345
It should be dns name that it responds with when you telnet to it from the outside of your network.

This should be an external domain name, although if not configured in the Exchange configuration it will use the internal one.
0
 
LVL 8

Expert Comment

by:Saineolai
ID: 34969354
Have a look under FQDN on this page: http://technet.microsoft.com/en-us/library/aa998662.aspx

0
 

Author Comment

by:carn
ID: 34969362
would there be any problems with using the internal (which is what it responds with externally)
0
 
LVL 8

Expert Comment

by:Saineolai
ID: 34969422
You ISP will not create a reverse dns entry for a private dns zone (.i.e., company.local).  If the internal dns zone is a valid domain e.g. .net, .com .org then there should be no problem.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

BIND is the most widely used Name Server. A Name Server is the one that translates a site name to it's IP address. There is a new bug in BIND (https://kb.isc.org/article/AA-01272), affecting all versions of BIND 9 from BIND 9.1.0 (inclusive) thro…
If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now