This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Reverse DNS FAILED

Dickiebird1974 over 9 years ago

Hello, This is my first post on the forum so fingers crossed for some help from you folks.

I have recently purchased UTM and i'm on v9.3. I have set us Web filtering, VPN and Webserver protection in my organisation without many issues.

I am totally stuck on the Email protection, our old setup used the Sophos email appliance to filter email and do SPX, this worked without issue.

I now have the UTM set up on a different internet feed and I am transferring services over from one IP range to this new one. I have re-pointed our A record to the new UTM on one of the external public IP addresses. Email does come through eventually but it can take over an hour in some cases.

When I use a tools like MX toolbox it tells me that the 'Reverse DNS fails' and that 'You hung up on us after we connected' when I run the tests.

Now I have run this against the old Sophos Email Appliance and the tests mainly come back as all OK so I don't think its anything to do with the way I have configured my DNS records.

Any Ideas why?

This thread was automatically locked due to age.

0 BarryG over 9 years ago

Take the public IP, and do a reverse DNS check on it yourself.

It should match the hostname, or AT LEAST be in the same domain.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 Dickiebird1974 over 9 years ago

I'm getting nothing. Where would you think this is set? on the Public Registrar's DNS system or on premises where the UTM is located.

The reason I ask is if I put our old IP in (the one that we used to use) it resolves. The only thing I have changed is pointing our exchange.ccgwynedd.org.uk A record to the new IP.

Thanks again for any help
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 9 years ago

You need to change the PTR record as well for reverse lookups.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 Dickiebird1974 over 9 years ago

After doing a bit of research, I guess this is done by our ISP. We currently use 123reg as our domain registrar but have a different ISP. I think I was looking for 123reg to make this change while actually it should be the ISP.

Can someone confirm i'm right?
Cancel
Vote Up 0 Vote Down

Cancel
0 scorpionking over 9 years ago
Yes, that's correct. For PTR records ask your ISP.
----------
Sophos user, admin and reseller.
Private Setup:

XG: HPE DL20 Gen9 (Core i3-7300, 8GB RAM, 120GB SSD) | XG 18.0 (Home License) with: Web Protection, Site-to-Site-VPN (IPSec, RED-Tunnel), Remote Access (SSL, HTML5)

UTM: 2 vCPUs, 2GB RAM, 50GB vHDD, 2 vNICs on vServer (KVM) | UTM 9.7 (Home License) with: Email Protection, Webserver Protection, RED-Tunnel (server)
Cancel
Vote Up 0 Vote Down

Cancel
0 Dickiebird1974 over 9 years ago

Thanks a lot for your help, will pass this request on to the ISP
Cancel
Vote Up 0 Vote Down

Cancel