[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1464
  • Last Modified:

Undeliverable email

I am getting this error when trying to email someone's company email from mine

Diagnostic information for administrators:

Generating server: APOLLO.MCSDOMAIN.COM

hisName@hisEmail.com
His.hisEmail.com #550 5.2.1 Mailbox unavailable. No reverse name (PTR) for your sender IP (198.170.218.41). ##

Original message headers:

Received: from APOLLO.MCSDOMAIN.COM ([2002:6464:6729::6464:6729]) by
 APOLLO.MCSDOMAIN.COM ([2002:6464:6729::6464:6729]) with mapi id
 14.01.0379.000; Tue, 21 Aug 2012 11:07:58 -0500
From: My Name <myName@reachhealthcareservices.com>
To: "hisname@hisEmail.com" <hisname@hisEmail.com>
Subject: test
Thread-Topic: test
Thread-Index: Ac1/tyDJKM766f3IQVeolqkTczHr3Q==
Date: Tue, 21 Aug 2012 16:07:58 +0000
Message-ID: <B0FD0B92687C894C890B3FDEE21AB97F0B0D45@APOLLO.MCSDOMAIN.COM>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [2002:6464:67ac::6464:67ac]
Content-Type: multipart/related;
      boundary="_004_B0FD0B92687C894C890B3FDEE21AB97F0B0D45APOLLOMCSDOMAINCO_";
      type="multipart/alternative"
MIME-Version: 1.0
0
DaveGerke
Asked:
DaveGerke
  • 3
  • 3
  • 2
  • +1
3 Solutions
 
Jon BrelieSystem ArchitectCommented:
This is because the recipient server cannot perform a PTR record lookup on the public IP of your mailserver.  It appears you have one, since a lookup on your IP resolves to        "webmail.reachhealthcareservices.com"

It could be that your mail server is identifying itself as something other than the PTR record.  I cannot tell because you don't appear to accept connections on port 25 there.

At any rate, make sure that your server is identifying itself as "webmail.reachhealthcareservices.com".  If you still have an issue after that, let us know and we can diagnose further.
0
 
Kelly HasenmuellerComputer Systems Administrator Commented:
A reverse DNS PTR record must exist for your mail server. This error indicates it is not setup.
0
 
gfilipeCommented:
Hi,

You should request both to your service provider to add a PTR record. Also if you are managing your mail server, add a few other records into your DNS setup:

In your forward DNS zone you should add a zone with the name pointing to your mail server name, i.e. 'smtp.reachhealthcareservices.com' or 'mail.reachhealthcareservices.com'

In this zone you should add:
Start of Authority (SOA) this should point to your primary DNS (tipically your PDC also)
Name Server (NS) - Your DNS servers and also your mail server;
Host (A) - pointing to your mail server or servers;

I would also advise to add SPF records to avoid SPAM issues:
Text (TXT) - v=spf1 ptr mx:'smtp.reachhealthcareservices.com' ip4:198.170.218.20
(note that the mx record above should point to the correct name)
If other mail services are being used such as blackberry external services you may also want to add to this record:
include:nameoftheblackberrydomain.com -all

This last record should also be added by your service provider.

Let us know if you need further information.

Regards,
GFilipe
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
DaveGerkeAuthor Commented:
mail.reachhealthcareservices.com points to 198.170.218.20 which is statically NATed to our webfilter.

webmail.reachhealthcareservices.com points to 198.170.218.41 which is statically NATed to the exchange server.

The exchange server is named Apollo and our domain is MCSDOMAIN. The error message states that the generating server was: APOLLO.MCSDOMAIN.COM.

I added webmail.reachhealthcareservices.com as the FQDN in the properties of the send connector. Does this take hours to update because I still get the error.
0
 
Jon BrelieSystem ArchitectCommented:
It could take a while to update on the recipient end.  Depends if they cache DNS lookup results, and if so, for how long.  I'd give it a few hours.
0
 
gfilipeCommented:
Make also sure that a nslookup to webmail.reachhealthcareservices.com on your internal network is pointing to your Apollo ip address.
0
 
Jon BrelieSystem ArchitectCommented:
@gfilipe - That wouldn't necessarily be related.  The generating server (apollo) is sending the failure notice based on what it received from the recipient server.  Not any tests that it is doing itself.  A PTR failure would not originate internally.  (Unless there were some severely draconian policies in place)
0
 
gfilipeCommented:
@Enphyniti - you are correct, it is a PTR failure in principle. Just made the mentioned as a nice to have and should have mention it that way.
0
 
DaveGerkeAuthor Commented:
My PTR records were incorrect and I had to setup the information in my mail filter. Since all three of you were on the right track, I will divide the points amongst all. Thank you for your help.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

  • 3
  • 3
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now