You may be on to something here. The problem is not related to the receipent's email domain (since I am not using 'Send direct' in SA), but rather in resolving the IP address of the mail server ( mail.cableone.net (http://mail.cableone.net)). SA seems to resolve mail.cableone.net (http://mail.cableone.net) to 24.116.0.0 (http://24.116.0.0) when in fact it is 24.116.0.226 (http://24.116.0.226). Both nslookup and ping correctly resolve mail.cableone.net (http://mail.cableone.net) to 24.116.0.226 (http://24.116.0.226). However, when I did a look up of the MX record for mail.cableone.net (http://mail.cableone.net) it appears to not exist.
C:\>nslookup *** Can't find server name for address 192.168.0.1 (http://192.168.0.1): Non-existent domain *** Default servers are not available Default Server: UnKnown Address: 192.168.0.1 (http://192.168.0.1) > set type=mx > mail.cableone.net (http://mail.cableone.net) Server: UnKnown Address: 192.168.0.1 (http://192.168.0.1) cableone.net (http://cableone.net) primary name server = ns1-10.cableone.net (http://ns1-10.cableone.net) responsible mail addr = tech.cableone.net (http://tech.cableone.net) serial = 4733 refresh = 900 (15 mins) retry = 300 (5 mins) expire = 3600 (1 hour) default TTL = 3600 (1 hour) > What's strange is that my email client (Outlook) successfully sends email using mail.cableone.net (http://mail.cableone.net) and when I examine the headers of that email it says that it is coming from s1.cableone.net (http://s1.cableone.net) (24.116.0.227 (http://24.116.0.227)). Is the MX record for mail.cableone.net (http://mail.cableone.net) correct? --Bob-- On 12/5/06, Dolinar, Jon <[EMAIL PROTECTED] (mailto:[EMAIL PROTECTED])> wrote: I have been reading this thread and have an idea although I am not sure if I remember all the logging you sent before. But you said that you see in the firewall the mail is going to a host not defined in your Servers Alive setup. Is it possible that Servers Alive forwards the mail to mail.yourdomain.com (http://mail.yourdomain.com) correctly When mail.yourdomain.com (http://mail.yourdomain.com) receives the mail it does a MX record lookup for the address of the recipient let's say [EMAIL PROTECTED] (mailto:[EMAIL PROTECTED]) and the MX record is returned as the host you are seeing in the firewall? You can use nslookup from a dos prompt to verify this. With the above example Nslookup Set type=mx Receivingdomain.com (http://Receivingdomain.com) If you have an email address in the form [EMAIL PROTECTED] (mailto:[EMAIL PROTECTED]) than be sure to put in host.receivingdomain.com (http://host.receivingdomain.com) in the nslookup search. John Dolinar Manager, Network Security Cuyahoga Community College [EMAIL PROTECTED] (mailto:[EMAIL PROTECTED]) To unsubscribe send a message with UNSUBSCRIBE as subject to salive@woodstone.nu If you use auto-responders (like out-of-the-office messages), then make sure that they are not send to the list nor to the individual members of the list that send a message. Doing this will get you removed from the list.
