SBD does it now. So if you have yours setup in a way that doesn't conform you're going to start having a good sized chunk of mail not reach it's intended recipient. And it's just going to get worse over time. It's very simple to set an rDNS entry that matches your HELO though, so I'm not sure it's a huge deal. Just something that all Exchange and Network admins need to be aware of.
-----Original Message----- From: Ken Cornetet [mailto:[EMAIL PROTECTED] Sent: Thursday, July 01, 2004 11:37 AM To: Exchange Discussions Subject: RE: MX records and Reverse DNS lookup To all who consider rejecting an SMTP connection based on what's in the HELO command, you WILL start rejecting valid email: If you reject connections based on no PTR record for the connecting IP, you will reject a little valid email. If you reject based on the PTR record not matching the host name in the HELO, you will reject a lot of valid email. Thus the prophets spoke in RFC2821 verse 4.1.4 An SMTP server MAY verify that the domain name parameter in the EHLO command actually corresponds to the IP address of the client. However, the server MUST NOT refuse to accept a message for this reason if the verification fails: the information about verification failure is for logging and tracing only. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jim Kennedy Sent: Thursday, July 01, 2004 10:54 AM To: Exchange Discussions Subject: RE: MX records and Reverse DNS lookup What most of them are doing is looking at the PTR record of the sending IP and compare it to what you announce in your HELO. And making sure they match. They do this because it is very effective at weeding out zombied machines. The SMTP HELO of the infected machine is not going to match the PTR of the IP. What they are doing is suggested by the RFC's, but not required. So this is an easy fix for you. Just look at the PTR of each of your public IP addresses that your email servers use. Then go into Exchange and adjust the HELO to match. Hopefully you have exchange 2003, it is a really easy fix. It is in the SMTP properties as 'masquerade domain' JK -----Original Message----- From: On Behalf Of April Fleming Subject: MX records and Reverse DNS lookup It is my understanding that many email servers will do a reverse dns lookup on incoming email to ensure a valid domain when sifting out spam etc. Thus, I must ensure that my email server which is sending out email must have an MX record so the Reverse DNS lookup will suceed. What I would like to know is whether the weight given the MX record will affect the reverse dns lookup. If I have email being sent from email server 3 (don't ask why, it isn't the point :) and that email server is weighted 15, will the email servers I am sending out to accept the email? Example MX 5 Email server 1 MX 10 Email server 2 MX 15 Email server 3 Thank you! April _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
