Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Exchange Server Public IP Reverse DNS

Posted on 2015-02-21
7
109 Views
Last Modified: 2015-04-20
We have an Exchange server with an assigned public IP.  Our website/email is hosted by our ISP.  When email is sent from our Exchange server, reverse DNS fails and we can't send email to certain clients.

I am going to set up a PTR record with our ISP to forward the email automatically to our Exchange server so I can implement reverse DNS to the exchange server's public IP address.

if our company's website/email domain name is mycompany.com and the exchange server public ip is 10.9.8.7 then should the reverse DNS point to mycompany.com, mail.company.com or what?

Lastly, is this the only solution to reconciling Reverse DNS to our Exchange Server?

thanks,
0
Comment
Question by:frdbadf
  • 3
  • 3
7 Comments
 
LVL 9

Expert Comment

by:RantCan
ID: 40623144
I think your question is broader than DNS and PTR records.

I need some clarification: when you say "email is hosted" do you mean MX records or a mail server that is literally forwarding mail?

If your exchange is Internet available on Port 25, then you should ensure it is significantly hardened. From a security perspective, using exchange in this manner is supported but massively insecure. I have used a variety of providers that use the mxlogic portal (McAfee, Spamsoap) and this helps keep your exchange from getting essentially DDOS'd on 25, as exchange will only take SMTP traffic from one IP address.
0
 

Author Comment

by:frdbadf
ID: 40623397
I have a similar setups with other locations, some have the mail forwarded to AppRiver who scrubs for spam and the forwards to the Exchange server public IP, and in all cases we have firewalls that forward port 25 on the public IP to the Exchange server on the internal LAN.

when I use http://ipadmin.junkemailfilter.com/rdns.php to check RDNS on the Public IP it responds with

RDNS for xx.xxx.xx.xx is: [mail.ourdomain.com] - (PTR record - xx.xx.xxx.xx.in-addr.arpa)

ERROR - Lookup Failed for [mail.ourdomain.com]

ERROR - Reverse Lookup Failed
IP [xx.xxx.xx.xx] does not match []

I perform NSLookup of mail.ourdomain.com and it says Server:  unknown

I'm missing a record?  MX?

thanks,
0
 
LVL 10

Expert Comment

by:cpmcomputers
ID: 40623974
You need to request your ISP to set rdns on their system for the external ip to "mail.yourdomain.com" not those of your own Dns management
This is why it is returning an in arpa address
0
Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

 

Author Comment

by:frdbadf
ID: 40624095
I worked over the phone with the ISP yesterday setting up rdns but it still does not resolve correctly.
0
 
LVL 10

Accepted Solution

by:
cpmcomputers earned 500 total points
ID: 40624147
The rdns for the primary ip needs setting by whoever controls it
Not sure how your provision is done
But by way if example

Myclient has an exchange server on their LAN in their local office
It is port mapped on port 25 to their public external IP address of their broadband connection provided by BT
Their mydomain.com has a website with 123-reg their ISP and this company also hosts their external DNS records for the domain (A records,MX,CNAME,PTR,etc

In order to get rDNS to resolve correctly we have to apply a request to BT ( the broadband provider) not 123reg (the domain ISP) as it is they that provide the external ip
0
 

Author Comment

by:frdbadf
ID: 40624157
We are using CBeyond, bought recently by Birch communications.  I will pass this on and get back to you.

thanks,
0
 
LVL 10

Expert Comment

by:cpmcomputers
ID: 40624164
Hi

Just to illustrate the point you might want to see this link

http://btbusiness.custhelp.com/app/answers/detail/a_id/8763/~/how-can-i-set-up-a-reverse-dns-on-my-domain-name%3F



Hope you get it sorted soon
0

Featured Post

How Do You Stack Up Against Your Peers?

With today’s modern enterprise so dependent on digital infrastructures, the impact of major incidents has increased dramatically. Grab the report now to gain insight into how your organization ranks against your peers and learn best-in-class strategies to resolve incidents.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The new Gmail Phishing Scam going around is surprising even the savviest of users with its sophisticated techniques.
A list of top three free exchange EDB viewers that helps the user to extract a mailbox from an unmounted .edb file and get a clear preview of all emails & other items with just a single click on mailboxes.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question