Somebody got something FUBAR'd if that's the case. I see your MX as MX1.imcu.com from the ultrdns nameservers who claim to be authoritative for your zone:
The SOA record is: Primary nameserver: pdns1.ultradns.net Hostmaster E-mail address: bill.krause.fiserv.com Serial #: 2010072104 Refresh: 10800 Retry: 3600 Expire: 2592000 4 weeks Default TTL: 86400 5 mx1.imcu.com 206.18.123.221 If you are using "Mail.imcu.com" for your MX, make sure your DNS host updates the record from MX1.imcu.com. One other thing to keep in mind, When your Ironport is sending mail (I assume inbound and outbound goes through the Ironport) the HELO in the destination mail server will see your FQDN of the Ironport which in your case will be "nachodevice.imcu.local". This could pose some problems; I would suggest that you change the host name of your Ironport to whatever your MX, and SMTP banner is, however you need to make that call since this could have some adverse impact on you network internally. Ironport Web Interface -> Network -> Select Interface Name to modify -> Enter your Hostname in the Hostname field. Test - Test - Test You can open up a couple of ssh sessions to your Ironport and use the Tail command and watch "SMTP Conversations" and "mail_logs" which can help.... https://www.testexchangeconnectivity.com/Default.aspx http://www.intodns.com/ http://www.whatsmydns.net/ http://www.sort-dns.com/ ________________________________ From: [email protected] [mailto:[email protected]] Sent: Friday, August 06, 2010 10:21 AM To: NT System Admin Issues Subject: RE: Local server name appears on the Internet DNS I am working his list now. Just curious as to how that name got to the Internet. My faxed request to my ISP was for mail.imcu.com to have the PTR of 206.18.123.221. So to have the imcu.local address having it I am a little bit concerned as to how it was updated... ________________________________ From: Richard Stovall [mailto:[email protected]] Posted At: Friday, August 06, 2010 10:57 AM Posted To: [email protected] Conversation: Local server name appears on the Internet DNS Subject: Re: Local server name appears on the Internet DNS I sure hope not. :-) I'd call ATT and ask them what's up, and also take the rest of the steps suggested by Mike French earlier. On Fri, Aug 6, 2010 at 10:36 AM, [email protected] <[email protected]> wrote: Could my Active Directory be pushing that address out to them? ________________________________ From: Richard Stovall [mailto:[email protected]] Posted At: Friday, August 06, 2010 10:32 AM Posted To: [email protected] Conversation: Local server name appears on the Internet DNS Subject: Re: Local server name appears on the Internet DNS In the reverse zone at ATT? It sure doesn't seem like it because the answer coming back for that IP is 03030611n4m055.imcu.local. A forward lookup of mail.imcu.com returns 206.18.123.221. You'll need to ask ATT to change the record in their reverse zone. On Fri, Aug 6, 2010 at 10:23 AM, [email protected] <[email protected]> wrote: There is a ptr for mail.imcu.com to 206.18.123.221 though. ________________________________ From: Richard Stovall [mailto:[email protected]] Posted At: Friday, August 06, 2010 9:35 AM Posted To: [email protected] Conversation: Local server name appears on the Internet DNS Subject: Re: Local server name appears on the Internet DNS The PTR record for 206.18.123.221 resolves to 03030611n4m055.imcu.local. Ask your ISP to change it to mail.imcu.com or whatever is appropriate. On Fri, Aug 6, 2010 at 9:24 AM, [email protected] <[email protected]> wrote: I am really confused. I am using MXToolBox and the SMTP tool. I get the below results: 220-nachodevice.imcu.local ESMTPIronport Success Not an open relay. 0 seconds - Good on Connection time 0.546 seconds - Good on Transaction time OK - 206.18.123.221 resolves to 03030611n4m055.imcu.local OK - Reverse DNS matches SMTP Banner Session Transcript: HELO please-read-policy.mxtoolbox.com 250 nachodevice.imcu.local [16 ms] MAIL FROM: <[email protected]> 250 sender <[email protected]> ok [31 ms] RCPT TO: <[email protected]> 550 #5.1.0 Address rejected. [31 ms] QUIT 221 nachodevice.imcu.local [47 ms] The nachdevice.imcu.local is my ironport, I get that The 03030611n4m055.imcu.local is my Exchange server, on the internal side of the firewall. I have an mx record for the ironport's external port. I do not know why the 0303... name is being published to the world?? Any ideas?? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
