Reverse DNS to match Sophos name, or mail server name

domain-name-systemexchange-2010mx-recordreverse-dnssophos

I think this is a simple question with a simple answer.

Our domain, cory.co.uk, reports a DNS mismatch when you do and SMTP test on mxtoolbox.com. I think this is causing issues sending to some addresses/companies.

We have a PTR: record set for 62.232.17.194 that points to mail2.cory.co.uk, and our MX record is set to mail2.cory.co.uk which resolves to 62.232.17.194, so that all seems correct.

I was told to set the FQDN on our send connectors (Exchange 2010) to match the MX record which I have done, but it has not resolved the issue. I am wondering, as we have a Sophos mail appliance in between the firewall and mail server, if the mismatch is because it is using the name of the Sophos appliance?

In which case, would the solution simply be to set the name of the appliance cluster to mail2.cory.co.uk?

Best Answer

"Warning - Reverse DNS does not match SMTP Banner"

mxtoolbox issues a warning because your incoming SMTP Banner does not contain the reverse DNS (PTR) of your IP. This test does not make sense since receiving mailservers/spamfilters don't check your incoming banner at all.

However, they care about your outgoing FcRDNS ( which seems to be correct) and they may check if your HELO hostname is fully qualified and resolvable. I'd therefore recommend to add A records for all your cluster FQDNs, all pointing to the sending IP.

Related Topic