Solved

Reverse DNS on Exchange 2010

Posted on 2015-01-22
5
166 Views
Last Modified: 2015-01-22
Hi
I have two exchange 2010 servers:  x.x.x.72 and x.x.x.73
I have a reverse DNS ptr record for both of these machines pointing back to mail.mydomain.com

My users are getting an error message when they try to send mail to a craigslist.com address.
The error I see in the log is:
----------
mail.mydomain.com [x.x.x.73] Please setup matching DNS and rDNS records: http://www.craigslist.org/about/help/rdns_failure
---------------

I have an A record [mail.mydomain.com] pointing back to .72
BUT I don't have an A record pointing back to .73.

So, I'm wondering is that what I need to do, create another A record and point .73 back to mail.mydomain.com?

I was concerned having two A records pointing back to the same  mail.mydomain.com. I wasn't sure if that would cause any problems.

Or should I create a send connector on .72 and only allow mail to be sent out for craigslist.com?

As you can see, I'm unclear on the best way to solve this.

Any advice is welcome.
Thanks!
0
Comment
Question by:nachtmsk
  • 3
  • 2
5 Comments
 
LVL 39

Accepted Solution

by:
footech earned 500 total points
Comment Utility
If you're sending out from both IPs, then you should have separate A records (with different names) for each of them.  And the PTR record for each should reference the name in the matching A record.
0
 

Author Comment

by:nachtmsk
Comment Utility
Thanks footech.
I just realized that before I read your response.
Nacht
0
 
LVL 39

Expert Comment

by:footech
Comment Utility
Glad you worked it out.  In case you're wondering, this is known as forward-confirmed reverse DNS.
0
 

Author Comment

by:nachtmsk
Comment Utility
Is changing the SMTP banner on the second  mail server needed?
Thanks again!
I didn't know that was the name for it.
0
 
LVL 39

Expert Comment

by:footech
Comment Utility
From what I've seen, not as many people check your SMTP banner, but yes it is good practice to have the banner match the name used for the matching DNS records.
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
PRTG Network Monitor lets you monitor your bandwidth usage, so you know who is using up your bandwidth, and what they're using it for.
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now