The mail server resolution is having problem_In a message optios_Received: from unknown (HELO MAIL.DOMAIN.COM) (IP_ADDRESS)
Hi, There is a problem in my external resolution of the mail server somewhere! Received: from unknown (HELO MAIL.DOMAIN.COM) (IP_ADDRESS) This is there if I right click the message and see the options there for HELO the server name is unknown Please experts help!!!
January 5th, 2011 7:55am

On Wed, 5 Jan 2011 12:51:07 +0000, manjurainbow123 wrote: >There is a problem in my external resolution of the mail server somewhere! > > > >Received: from unknown (HELO MAIL.DOMAIN.COM) (IP_ADDRESS) > >This is there if I right click the message and see the options there for HELO the server name is unknown Is there a PTR record for the IP address? --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
January 5th, 2011 8:18am

Thanks for the reply Rich, The IP address is out external IP address so there no pointer record..... Clear me one doubt our message is sent VIA messagelabs gateway, do we need a PTR record for the same? Also plz explain me why this reverse lookup is happening....(is it mandatory) Thanks, Manju
January 5th, 2011 8:38am

On Wed, 5 Jan 2011 13:33:45 +0000, manjurainbow123 wrote: >The IP address is out external IP address so there no pointer record..... > >Clear me one doubt our message is sent VIA messagelabs gateway, do we need a PTR record for the same? > >Also plz explain me why this reverse lookup is happening....(is it mandatory) The format of the "Received:" header can be found in RFC2821 Section 4.4, "Trace Information". The information you posted seems to be heavily altered so it's not possible to know what you're really seeing. Is that "Received:" header one that's inserted by your server, or one that you find in the headers inserted by other servers? The name that follows the "from" in the "Received:" header is usually the name from the HELO\EHLO command presented to the receiving server. The information within the parentheses should be the information from the TCP connection information on the receiving server. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
January 5th, 2011 10:25am

Hi Rich, Thanks for the reply... Please find the below details as it is from my server and the another organisation server. Myserver Resoponse (If you right click the message and see message option) X-Originating-IP: [202.44.56.12] Received: (qmail 29421 invoked from network); 4 Jan 2011 09:40:40 -0000 Received: from unknown (HELO MAIL2.PALNYC.COM) (202.44.56.12) by server-7.tower-37.messagelabs.com with AES128-SHA encrypted SMTP; 4 Jan 2011 09:40:40 -0000 My one more friends' organisation X-Originating-IP: [87.213.36.93] Received: (qmail 23072 invoked from network); 4 Jan 2011 11:11:40 -0000 Received: from unlabelled-93-36-213-87.versatel.net (HELO Cenpr353.corporateroot.net) (87.213.36.93) by server-9.tower-182.messagelabs.com with AES128-SHA encrypted SMTP; 4 Jan 2011 11:11:40 -0000 There is a difference here can you please let me know what is the reason it says unknown and where to modify it. Manju
January 6th, 2011 3:14am

On Thu, 6 Jan 2011 08:10:09 +0000, manjurainbow123 wrote: >Please find the below details as it is from my server and the another organisation server. > >Myserver Resoponse (If you right click the message and see message option) > >X-Originating-IP: [202.44.56.12] >Received: (qmail 29421 invoked from network); 4 Jan 2011 09:40:40 -0000 >Received: from unknown (HELO MAIL2.PALNYC.COM) (202.44.56.12) > by server-7.tower-37.messagelabs.com with AES128-SHA encrypted SMTP; 4 Jan 2011 09:40:40 -0000 This is what you see in a message that's in your mailbox? And your mailbox is on an Exchange server? If so, there's no "Received:" header that's been inserted by your server -- have you removed it??? Are you using some sort of POP-to-SMTP kludge to get that message into your mailbox? >My one more friends' organisation > >X-Originating-IP: [87.213.36.93] >Received: (qmail 23072 invoked from network); 4 Jan 2011 11:11:40 -0000 >Received: from unlabelled-93-36-213-87.versatel.net (HELO > Cenpr353.corporateroot.net) (87.213.36.93) by > server-9.tower-182.messagelabs.com with AES128-SHA encrypted SMTP; 4 Jan 2011 11:11:40 -0000 >There is a difference here can you please let me know what is the reason it says unknown and where to modify it. Again, there is no "Received:" header that's inserted by Exchange in there. Please provide some explanation of how you send and receive Internet SMTP e-mail. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
January 6th, 2011 5:09pm

Hi Rich, We are using MS outlook configured for exchange server and POP or IMAP. The messages are sent VIA message labs for spam filtering. My only doubt is there is any issue in the resolution of reverse lookup of my server name??? This is in my mailbox, I have not removed any header.
January 7th, 2011 2:00am

On Fri, 7 Jan 2011 06:55:16 +0000, manjurainbow123 wrote: >We are using MS outlook configured for exchange server and POP or IMAP. Regardless, there's no "Received:" header from your Exchange server in the examples you've submitted. That tells me that you've either removed them from the data you've posted or the messages are not arriving at your server using SMTP -- in which case your server isn't doing anything with the RFC headers in the message. >The messages are sent VIA message labs for spam filtering. > >My only doubt is there is any issue in the resolution of reverse lookup of my server name??? Since your server isn't getting the message sent to it using SMTP I doubt you server is involved at all. >This is in my mailbox, I have not removed any header. Well, I don't see one that Exchange inserted. Exchange will insert a "Received:" header that looks like this: Received: from somedomain.com (ip-address-here) by <exchange-server> (192.168.1.23) with Microsoft SMTP Server id 8.3.137.0; Thu, 6 Jan 2011 09:38:05 -0500 --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
January 7th, 2011 12:32pm

It says unknown because the receiving MTA does a lookup of the originating IP addresses PTR and receives no result (presumably because one does not exist). In the example of your friend's server the PTR for 87.213.36.93 is unlabelled...versatel.net.
January 7th, 2011 5:17pm

Hi Chris, How to avoid that unknown and insert the fqdn of the server over there like unlabled...versatel.net? Manju
Free Windows Admin Tool Kit Click here and download it now
January 11th, 2011 12:56am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics