Exchange and DDNS? Possible?


Recommended Posts

I'm sure all you get is a DNS address resolved to an IP with any Dynamic DNS service.

The only way I can think is to have an alias such as mx0.example.com which is a CNAME of test.no-ip.org. mx0.example.com will then need to be a record itself. I guess you could also just have test.no-ip.org as your only MX record.

My first thought though would be to test the possibility of receiving and sending on port 25. I would have thought most domestic ISP's will block this communication.

SK[' timestamp=1343722926' post='595047579]

I'm sure all you get is a DNS address resolved to an IP with any Dynamic DNS service.

The only way I can think is to have an alias such as mx0.example.com which is a CNAME of test.no-ip.org.

My first thought though would be to test the possibility of receiving on port 25 and sending. I would have thought most domestic ISP's will block this communication.

well i think there was also a way around this for using a ddns fqdn as a web server from your home rite? i imagine there is something also like this for stmp (port 25, like you comment)

Can't think of a way as every other SMTP server in the world will be expecting to speak to your server on port 25. If your ISP block it then your pretty much stuffed. DynDNS offer some sort of mail feature though.

As I said test the connectivity first before implementing a solution that won't work. I host my three sites on my home network with the same Dynamic IP being used as an alias. It works fine. I know though that port 25 is blocked outbound as there is no mail functionality working. Kinda annoying as I run forums. Still, they are dead ones these days and are only really used for reference.

SK[' timestamp=1343722926' post='595047579]

I'm sure all you get is a DNS address resolved to an IP with any Dynamic DNS service.

The only way I can think is to have an alias such as mx0.example.com which is a CNAME of test.no-ip.org. mx0.example.com will then need to be a record itself. I guess you could also just have test.no-ip.org as your only MX record.

My first thought though would be to test the possibility of receiving and sending on port 25. I would have thought most domestic ISP's will block this communication.

Not all do. Time Warner for example leaves the port open but adds its residential IP blocks to one or more DNS Block lists, so that all mail that comes from them gets marked as spam by receivers who check against said lists.

I'd imagine using something like DDNS probably would cause a similar issue. Though idk.

If what you want to do is accept incoming mail, yeah not too many issues there - get a MX record pointed to where you want to accept mail. That is about it.

Where the problem comes in is sending, as mentioned already -- most of the major players will block you from sending them email from a dynamic IP. Even if not using a block list, do you have a valid PTR for this IP - not going to accept mail from you.

So if what you want to do is send mail to your friend billy on his HOME smtp server, then sure go for it. If what you want to do is send actual production email that your sure is going to get there. Not so much, not to any of the major player domains, or any companies doing any sort of decent filtering.

  • 5 months later...

I run my own exchange server. Receiving emails are OK but sending gives an error. Tested via Exchange Connectivity and its says that no PTR Record available for the IP. Any solution to this?

by the way, I use Zerigo as my Dynamic DNS.

receiving you will be fine, it is always the sending. Many isps have closed out bound port 25 traffic outside of their network when on their dynamic ip network. Many spam filters have excluded dynamic range from being able to get through. How do you get around the world denying you?

The option would be to send through a mail host, you can use your isp mail host, but they may have a sending limit.

receiving you will be fine, it is always the sending. Many isps have closed out bound port 25 traffic outside of their network when on their dynamic ip network. Many spam filters have excluded dynamic range from being able to get through. How do you get around the world denying you?

The option would be to send through a mail host, you can use your isp mail host, but they may have a sending limit.

Using my ISP Mail Host is a great idea. I don't mind if they have sending limit. Do I only require to get the SMTP for the ISP? or what else info is required?

yeah sure there are lots of people that provide FREE email servers for you to send your mail through :rolleyes:

If you want/need to send email - then you have to be ready to show your not some random box on the net sending spam. No business that needs to use email is going to be on a dynamic IP. Your also going to be able to setup a PTR because again your not a on dynamic IP and your ISP provides you the ability to change the name the IP resolves too. Only the owning ISP can do this, arin controls who where netblocks point for dns here in the US, other parts of the world would be other orgs, lacnic, ripe, apnic, afrinic

Shoot more and more companies are giving up on running their own mail and doing it in the cloud themselves - not even running their own email servers any more. Or contract out companies to be the front man to their exchange boxes - where this other network sends and recv the mail, and exchange gets mail from this company, and sends all email through them "smart host"

Here is the thing - running your own email server on a home connection for anything other than a hobby or for you to get mail from to some bs domain that gets a couple of mails a day and sends a few a day through your isp email server is nothing more than an exercise in futility.

More likely than not your prob just going to end up running a spam machine anyway ;)

edit: What version of exchange are you running? Look up how to setup smarthost. Keep in mind that many isp will not allow you to send mail from other than your email address, ie say account is [email protected] -- many will not allow you to send mail through their servers that say the email is from [email protected]

SMTP you will need as well as your account info to be able to authenticate and send mail through. You will need to send mail as this account though...the mail header needs to show this for your recipients to be able to receive mail. Unless they just do a ip check (which may be the case), but if they do any sort of resolve and the ip doesn't match the header host it won't make it through. There is a lot that goes on to verify authenticity of the sender in a spam filter.

edit: What version of exchange are you running? Look up how to setup smarthost. Keep in mind that many isp will not allow you to send mail from other than your email address, ie say account is [email protected] -- many will not allow you to send mail through their servers that say the email is from [email protected]

am using Exchange Server 2013 over Windows server 2008 R2 (which is a DC as well). My ISP is Saudi Net (worst ISP in the entire middle east with no support at all). Cant even request for PTR. Tried the SMTP for them but still not working, maybe am not configuring Exchange Server properly.

SMTP you will need as well as your account info to be able to authenticate and send mail through. You will need to send mail as this account though...the mail header needs to show this for your recipients to be able to receive mail. Unless they just do a ip check (which may be the case), but if they do any sort of resolve and the ip doesn't match the header host it won't make it through. There is a lot that goes on to verify authenticity of the sender in a spam filter.

I tried tons of ways but none work. Web Server was way easy configuring compared to exchange server :/

"Cant even request for PTR."

I don't know of any ISP that would setup PTR of a dynamic IP other than the generic ones you get.. For example

;; QUESTION SECTION:

;xx.xx.13.24.in-addr.arpa. IN PTR

;; ANSWER SECTION:

xx.xx.13.24.in-addr.arpa. 7200 IN PTR c-24-13-xx-xx.hsd1.il.comcast.net.

Now such a PTR might meet some filtering some domains do in the sense that it exists.. Others might reject it because its not a true reflection of the forward name.. So for example if your mail server IP is resolved via smtp.somedomain.tld, they might like the PTR of the IP that resolves to to reflect the same smtp.somedomain.tld

As I already mentioned, some ISPs won't allow their smtp servers to send mail for anything other than the account holder email address. So if your email address with your isp is [email protected] and your trying to send email from [email protected] - even if you auth with your specific account info, their server might tell you to get lost since the email address is not valid for that account.

Many ISPs don't even allow outbound on 25 from their dynamic client networks, nor allow their smtp server to send email for any other email address then what is listed on the specific account - this is to help reduce spam being sent from their network. If you have such restrictions then your only solution is to pay for a smarthost that allows you to send mail they forward on your behalf on a different port, etc. The dyndns company already mentioned provides such solutions. If you not willing to pay for such services - how are you affording exchange? ;)

If you not willing to pay for such services - how are you affording exchange? ;)

I can afford all the services, but I wanted to setup it for free at all. By the way, setting up all this was a part of my exercise. Wanted to learn about the Web hosting, Domain Controller, Email exchange. All was setup properly except this Exchange. I tried adding the PTR host in Zerigo (my Dynamic DNS service) it was done but my ISP really need to assign me a PTR record to my IP (which seems not possible for Dynamic IP Users). How about if I search for some free SmartHost providers before paying for something :rofl:

Edit: by the way, I get free license for Microsoft Products :D so trying all of them is not that bad :rolleyes:

Your not going to find a FREE smart host.. Not that I can think of - I don't even think google apps when it was free for your domains allowed that?

What would the smarthost get out of it? Other than prob blacklisted because you were using them to send spam ;)

You can study the setup of exchange without really having to send mail to all the major players.. Does your isp allow outbound of their network on 25? Simple enough to test, try connecting to a smtp server somewhere?

Cheap way you could do it is get yourself a VPS somewhere... I have a vps for $15 a year that would be more than capable of sending email for me, etc. And I can setup the PTR on the IP the host gave me. So it can be done for very cheap.

But again if all your doing is playing/learning does not matter if the major players will block you.. there are plenty of domains you can send to for testing that wont filter you.

So telnet to a smtp server on 25, can you connect - if so then your isp allows you to send outbound on 25 and could setup exchange to directly send.. Just some of the major players are not going to accept mail from you.

budman@ubuntu:~$ telnet mailin-01.mx.aol.com 25

Trying 205.188.159.42...

Connected to mailin-01.mx.aol.com.

Escape character is '^]'.

554- (RTR:DU) http://postmaster.info.aol.com/errors/554rtrdu.html

554 Connecting IP: 24.13.xx.xx

Connection closed by foreign host.

so you see my ISP allows me outbound on 25, but mail server for AOL told me to get lost ;) Because

54 RTR:DU[/url]

Cheap way you could do it is get yourself a VPS somewhere... I have a vps for $15 a year that would be more than capable of sending email for me, etc. And I can setup the PTR on the IP the host gave me. So it can be done for very cheap.

Where? can I get that too?

Will post the telnet results once I get the exact SMTP for the ISP :wacko:

smtp for the isp? Just do a dns look for any smtp server for any domain. Use aol for an example

As to a vps -- here are some listings of cheap ones

http://www.lowendbox.com/

http://lowendstock.com/

Mine is with http://buyvm.net/

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Can you read? I've said I'm willing to pay more for a notchless (no notch) 3:2 screen.
    • Not even an OLED display on the laptops. Also it seems that the laptop design isn't the same as the Surface Ultra model. Looks like bargain bin at high prices.
    • make your own notch - it's not that hard
    • VirtualBox 7.2.10 by Razvan Serea VirtualBox is a powerful x86 and AMD64/Intel64 virtualization product for enterprise as well as home use. Targeted at server, desktop and embedded use, it is now the only professional-quality virtualization solution that is also Open Source Software. Presently, VirtualBox runs on Windows, Linux, macOS, and Solaris hosts and supports a large number of guest operating systems including but not limited to Windows (NT 4.0, 2000, XP, Server 2003, Vista, 7, 8, Windows 10 and Windows 11), DOS/Windows 3.x, Linux (2.4, 2.6, 3.x, 4.x, 5.x and 6.x), Solaris and OpenSolaris, OS/2, OpenBSD, NetBSD and FreeBSD. Some of the features of VirtualBox are: Modularity. VirtualBox has an extremely modular design with well-defined internal programming interfaces and a client/server design. This makes it easy to control it from several interfaces at once: for example, you can start a virtual machine in a typical virtual machine GUI and then control that machine from the command line, or possibly remotely. VirtualBox also comes with a full Software Development Kit: even though it is Open Source Software, you don't have to hack the source to write a new interface for VirtualBox. Virtual machine descriptions in XML. The configuration settings of virtual machines are stored entirely in XML and are independent of the local machines. Virtual machine definitions can therefore easily be ported to other computers. VirtualBox 7.2.10 changelog: VMM: Fixed issue when CentOS 10 VM was not booting due to the message "Fatal glibc error: CPU does not support x86-64-v3" (​github:gh-642) Devices/EFI: Fixed booting issue when ARM VM had less than 1024 MiB of RAM assigned (​github:gh-679) USB: Fixed issue when it was not possible to attach USB device to headless VM on Apple Silicon/macOS 26.4.1 (​github:gh-631) Storage: Fixed issue when VIRTIO-SCSI device was not recognized as SSD device by guest system (​github:gh-634) Network: Fixed issue in E1000 emulation code which triggered debug log creation (​github:gh-645) Network: Fixed issue in E1000 emulation code which prevented OS/2 guest from booting (​github:gh-683) Linux Host: Fixed issue when VMs could not be started due to kernel oops (​github:gh-639) Linux Host and Guest: Fixed issue when kernel modules were failing to build with openSUSE 16.0 kernel Linux Host and Guest: Added initial support for kernel 7.1 Linux Host and Guest: Added extra fixes for RHEL 9.8 kernel (​github:gh-676) Linux Host and Guest: Added possibility to build source code using NASM instead of YASM as the assembler (​github:gh-520) Linux Guest Additions: Added initial support for Extended Data Control Protocol for clipboard sharing with Plasma on Wayland guests (​github:gh-33) Linux Guest Additions: Added extra fixes for preventing vboxvideo kernel module build with kernel version 7.0 and newer (​github:gh-655) OS/2 Guest Additions: Fixed issue when Shared Folders automount and clipboard sharing stopped working (​github:gh-551) Download: VirtualBox 7.2.10 | 170.0 MB (Open Source) Download: VirtualBox 7.2.10 Extension Pack | 19.1 MB View: VirtualBox Home Page | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • OK, now ask yourself how are they going to enforce that law? By requiring every single adult to prove their age and provide their legal identity documents to an UNREGULATED 3rd party company that already has a long track record of multiple data breaches. Not to mention, parliament have voted AGAINST this ban, twice, and Starmer is going ahead anyway. So, where's the democracy here, because that looks like dictatorship to me. The solution here is parental responsibility, not government control. Run some public service announcements on TV and UK social media teaching parents how to setup parental controls. That's already been proven to actually work. But the, this is not and has NEVER been about keeping kids safe. It's about control and monitoring. Watching what you're doing online and controlling what you can see and what you can say.
  • Recent Achievements

    • Week One Done
      suprememobiles48 earned a badge
      Week One Done
    • One Month Later
      Windows Guy earned a badge
      One Month Later
    • One Month Later
      Prasann earned a badge
      One Month Later
    • Week One Done
      Prasann earned a badge
      Week One Done
    • First Post
      Dys Topia earned a badge
      First Post
  • Popular Contributors

    1. 1
      +primortal
      522
    2. 2
      +Edouard
      179
    3. 3
      PsYcHoKiLLa
      104
    4. 4
      Steven P.
      89
    5. 5
      ATLien_0
      70
  • Tell a friend

    Love Neowin? Tell a friend!