Mail SMTP Relay - Reverse DNS Question

Sparkum

Yep I knew it was a reverse DNS problem, and already contacted my provider.
They said reverse DNS is already configured, already have rDNS

So my question is can I only have reverse DNS on mail.domain or could I have it on mail-store1.domain and if so is there something more I need to do than an A record and a MX record

scottalanmiller

I might not have followed this correctly but... PTR (Reverse DNS) records have to be done at the IP Address point, not with your DNS provider. Whoever does your A and MX records can't be the company with the PTR record. Your ISP has to do the PTR record. The ISP at which your MX record points.

scottalanmiller

@Sparkum said:

So my question is can I only have reverse DNS on mail.domain or could I have it on mail-store1.domain and if so is there something more I need to do than an A record and a MX record

PTR records are on IP addresses, not on domains. What would a reverse DNS record on a domain even mean?

brianlittlejohn

@scottalanmiller said:

I might not have followed this correctly but... PTR (Reverse DNS) records have to be done at the IP Address point, not with your DNS provider. Whoever does your A and MX records can't be the company with the PTR record. Your ISP has to do the PTR record. The ISP at which your MX record points.

It is a hosted server, so the host should be the one making sure it is correct.

@scottalanmiller said:

@Sparkum said:

So my question is can I only have reverse DNS on mail.domain or could I have it on mail-store1.domain and if so is there something more I need to do than an A record and a MX record

PTR records are on IP addresses, not on domains. What would a reverse DNS record on a domain even mean?

PTR records on IP Addresses is what he means.

Sparkum

So here's something weirder....

So apparently last night my email server actually failed to receive emails, error of insufficient resources.

I only noticed this cause I signed up for something and didnt get a confirmation email.

Started looking and ya, my server needed a reboot, but oddly enough Artica was holding onto 15 emails, I rebooted my server, hit resend, and got them all...

I assume I still need to fix the reverse DNS thing though eh?

brianlittlejohn

@Sparkum I'm still having trouble figuring out what your end goal is. Can you clarify what mail.domain.ca and mail-store1.domain.ca are doing? What you are wanting them to do?

Sparkum

@brianlittlejohn

So mail.domain.ca is simply my email.
Plain and simple thats my email.
Is and has been working for over a year now.

mail-store1.domain.ca I simply want to catch emails if for any reason my server fails.
Essentially a baraccuda spam and firewall or other email appliance.

Wanting to do it for free, I realize there are services currently out there that do it for a very nominal amount of money.

Sparkum

@scottalanmiller
Oh really?

So I need to contact where the virtual is hosted not where the nameserver is hosted?

brianlittlejohn

@Sparkum Ok, so you are wanting mail-store1 to store your messages when your mail server is down, then relay them once the mail server is back up.

Sparkum

@brianlittlejohn
Exactly yup

brianlittlejohn

@Sparkum Are they both running Artica?

Sparkum

@brianlittlejohn

Nope, Artica is only for the relay

brianlittlejohn

Then the error you are getting is from messages going from Artica to your mail server correct?

Sparkum

@brianlittlejohn

Honestly at this point I'm a little confused since my mail server did fail last night and Artica 100% did its job.

I guess my real underlying question is getting reverse DNS up and going. If I'm contact who my name server is with or where my virtual is hosted.

And do I simply say "Hey I need a "PTR" record for mail-store1.domain.ca

brianlittlejohn

@Sparkum Are you using Artica for outbound proxy aswell? If so, it would be best to change it. If your mail server is sending directly out you can keep it at mail.domain.ca

Sparkum

@brianlittlejohn
Outbound is Mandrill

brianlittlejohn

@Sparkum You should be good then.

scottalanmiller

@Sparkum said:

@scottalanmiller
Oh really?

So I need to contact where the virtual is hosted not where the nameserver is hosted?

Yes, if they are the ones that interface with the ISP or are the ISP. They would be the ones. Often if you have something like AWS, Rackspace, etc. they have an interface for this.

PSX_Defector

@scottalanmiller said:

I might not have followed this correctly but... PTR (Reverse DNS) records have to be done at the IP Address point, not with your DNS provider. Whoever does your A and MX records can't be the company with the PTR record. Your ISP has to do the PTR record. The ISP at which your MX record points.

Incorrect. It can be the same one, but someone has to have delegation to perform it.

https://www.arin.net/resources/request/reversedns.html
https://www.apnic.net/services/services-apnic-provides/registration-services/reverse-dns
https://www.ripe.net/manage-ips-and-asns/db/support/configuring-reverse-dns
http://www.lacnic.net/en/web/lacnic/guia-de-sistema-04
https://www.afrinic.net/library/corporate-documents/216-how-to-request-reverse-delegation-in-afrinic-region

And for the most part, most ISPs, especially home ISPs, do not delegate out permissions.

Dashrender

@scottalanmiller said:

I might not have followed this correctly but... PTR (Reverse DNS) records have to be done at the IP Address point, not with your DNS provider. Whoever does your A and MX records can't be the company with the PTR record. Your ISP has to do the PTR record. The ISP at which your MX record points.

You're assuming that @Sparkum is using a different DNS provider than his ISP. If he is using the ISP to provide DNS for his setup, he's already calling the right people.

And from reading the response he received from the ISP, I'd guess they are one in the same.

Also, as for your Reverse DNS issue, can you have more than one PTR record on an IP? If you can great, but if not, you'll be forced to get a second IP address for the Artica.