PTR record not valid for all domains

emailexchange-2010ptr-recordsmtpwindows-server-2008

We have an issue sending emails to certain domains, namely Time Warner and Cox. Last week, we decommissioned our Exchange 2003 server and now our Exchange 2010 server is doing all of the transport for our domain. We run our own authoritative name servers, so we are in charge of the DNS and have modified our PTR record to reflect the new server. All mailflow is working except for these 2 domains.

When I telnet on port 25 to the mail servers for Cox and Time Warner I am receiving errors. For Cox the error is:
554… rejected – no rDNS

And when I telnet to port 25 to the Time Warner mail server we get this:
554 5.7.1 – Connection refused. IP name lookup failed for x.x.x.x

I have run through the outbound SMTP test on Microsoft Remote Connectivity Analyzer and get 100% completely successful results. MXToolbox comes up with all successful tests on SMTP as well, showing correct reverse banner check, and no blacklisting. DNSQueries.com shows a valid reverse DNS entry as well for us.

Outbound emails to these 2 domains continue to sit in the queue. Any ideas or advice would be greatly appreciated.

Thanks!

Best Answer

Contact your ISP and ask them to update the PTR record for your IP address with the hostname of your mailserver...

Related Solutions

Linux – How to correct Postfix’ ‘Relay Access Denied’

TLS just enables encryption on the smtp session and doesn't directly affect whether or not Postfix will be allowed to relay a message.

The relaying denied message occurs because the smtpd_recipient_restrictions rules was not matched. One of those conditions must be fulfilled to allow the message to go through:

smtpd_recipient_restrictions =
    permit_sasl_authenticated
    check_recipient_access hash:/etc/postfix/filtered_domains
    permit_mynetworks
    reject_unauth_destination

To explain those rules:

permit_sasl_authenticated

permits authenticated senders through SASL. This will be necessary to authenticate users outside of your network which are normally blocked.

check_recipient_access

This will cause postfix to look in /etc/postfix/filtered_domains for rules based on the recipient address. (Judging by the file name on the file name, it is probably just blocking specific domains... Check to see if gmail.com is listed in there?)

permit_mynetworks

This will permit hosts by IP address that match IP ranges specified in $mynetworks. In the main.cf you posted, $mynetworks was set to 127.0.0.1, so it will only relay emails generated by the server itself.

Based on that configuration, your mail client will need to use SMTP Authentication before being allowed to relay messages. I'm not sure what database SASL is using. That is specified in /usr/lib/sasl2/smtpd.conf Presumably it also uses the same database as your virtual mailboxes, so you should be able enable SMTP authentication in your mail client and be all set.

Reverse DNS does not match SMTP Banner

In the SMTP service of Exchange there is a special setting to override the hostname exposed by SMTP server during SMTP greeting. I think it is inthe same window of the smart host setting (sorry I don't have an exchange server at hand right now)

Related Topic