Re: Secondary MX IP address as Originating IP Address - Why?

Tech-Archive recommends: Speed Up your PC by fixing your registry



You should have it set to a static IP and a valid reverse and a spf record.



"Mike G" <MikeG@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:206262BE-8667-4C37-924D-82A3FB45BAE8@xxxxxxxxxxxxxxxx
My SMTP email message headers are using my WAN Gateway Ip address
(70.254.xxx.xxx) as the originating IP address instead of my mail server IP
address (71.142.xxx.xxx incoming). I guess this is why SPF was bouncing them
back?

"john doe" wrote:

I would have to guess your NAT Statement. I you are using an internal ip
address and you have that ip address set to a static external address, your
NAT must be doing it I would guess.

Send an email to an external account read the header. This will tell you the
hops. If the address is not what you want, have the firewall person take a
look.


"Mike G" <MikeG@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:8E194594-CBEF-4527-A012-5C4DED8EDF19@xxxxxxxxxxxxxxxx
> No I don't use a smart host. All mail was sent directly from my server > IP
> Address. I am using external DNS for mail resolving/routing.
>
> "Andy David {MVP}" wrote:
>
>> On Mon, 11 Jun 2007 17:00:01 -0700, Mike G
>> <MikeG@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
>>
>> >Question: Why are my outgoing emails showing my secondary MX IP >> >address
>> >as
>> >the originating address rather my primary dedicated IP address?
>> >
>> >My SBS 2003 Exchange Server has been working fine. This morning I got
>> >some
>> >email bounced back because it was rejected due to an SPF policy that >> >I
>> >put in
>> >about a month ago (its been working fine).
>> >
>> >The SPF policy is to not accept mail from a sender other than the IP
>> >address
>> >of
>> >my SBS Exchange Server 71.142.xxx.xxx. (priority 10). In looking at >> >the
>> >Orignating IP Address on the boucned mail it shows 70.254.xxx.xxx
>> >(priority
>> >20), which is the IP Address of the secondary MX record. The reason >> >the
>> >emails bounced is because I didn't include a policy for the secondary >> >MX
>> >record or IP Address.
>> >
>> >I removed the SPF Policy Text record on my web host sites. It sends >> >mail
>> >to
>> >servers that check SPF OK now. I have talked with both my ISP (At&t) >> >and
>> >my
>> >website host about this. They have no answer. The DNS and MX records >> >are
>> >correct according to DNS Stuff.
>> >
>> >For some unkown reason it apprears my secondary mail server (with my
>> >ISP)
>> >has become my primary sender instead of my SBS server???
>> >
>> >As always I appreciate your responses.
>>
>> Are you smarthosting outbound mail through your ISP?
>>
>> >
>>



.



Relevant Pages

  • [SLE] SPF plugin for postfix
    ... IMHO the proper answer is, among other, SPF. ... So, I created an SPF record for my site in my DNS server, (after changing ... Wietse Venema, the creator of postfix, recommends to implement this ... The postfix plugin package is named 'postfix-policyd-SPF'. ...
    (SuSE)
  • Re: Undeliverable Mail
    ... Well adding an spf record is out of the question. ... Yes, our large, cluster-based DNS system is compliant with RFC 1035. ... while EHLO is an Enhanced command. ... > on the properties of the Default SMTP Virtual server. ...
    (microsoft.public.exchange.admin)
  • Re: Sender Spoofing via SMTP
    ... > connect to the server via Telnet to 25 and send my cubemate an email ... the decision to relay mail or not. ... It's called SPF. ... Looks up the SPF record in the DNS for the domain given in MAIL ...
    (Security-Basics)
  • Re: SPF Record on server and reverse lookup zone
    ... server with Fasthosts. ... SPF is poorly understood by even most "DNS experts" but it isn't ... on your public SMTP server ... SPF records that "authorize" or vouch for every server that can ...
    (microsoft.public.windows.server.dns)
  • Re: Reverse DNS and mail server
    ... So going back to my original question should my PTR for mx record (server ... > True it checks for the registration of the servers host DNS name (which ... > It may also be checking SPF records but it would foolish to ...
    (microsoft.public.win2000.dns)