Exchange and DDNS? Possible?


Recommended Posts

I'm sure all you get is a DNS address resolved to an IP with any Dynamic DNS service.

The only way I can think is to have an alias such as mx0.example.com which is a CNAME of test.no-ip.org. mx0.example.com will then need to be a record itself. I guess you could also just have test.no-ip.org as your only MX record.

My first thought though would be to test the possibility of receiving and sending on port 25. I would have thought most domestic ISP's will block this communication.

SK[' timestamp=1343722926' post='595047579]

I'm sure all you get is a DNS address resolved to an IP with any Dynamic DNS service.

The only way I can think is to have an alias such as mx0.example.com which is a CNAME of test.no-ip.org.

My first thought though would be to test the possibility of receiving on port 25 and sending. I would have thought most domestic ISP's will block this communication.

well i think there was also a way around this for using a ddns fqdn as a web server from your home rite? i imagine there is something also like this for stmp (port 25, like you comment)

Can't think of a way as every other SMTP server in the world will be expecting to speak to your server on port 25. If your ISP block it then your pretty much stuffed. DynDNS offer some sort of mail feature though.

As I said test the connectivity first before implementing a solution that won't work. I host my three sites on my home network with the same Dynamic IP being used as an alias. It works fine. I know though that port 25 is blocked outbound as there is no mail functionality working. Kinda annoying as I run forums. Still, they are dead ones these days and are only really used for reference.

SK[' timestamp=1343722926' post='595047579]

I'm sure all you get is a DNS address resolved to an IP with any Dynamic DNS service.

The only way I can think is to have an alias such as mx0.example.com which is a CNAME of test.no-ip.org. mx0.example.com will then need to be a record itself. I guess you could also just have test.no-ip.org as your only MX record.

My first thought though would be to test the possibility of receiving and sending on port 25. I would have thought most domestic ISP's will block this communication.

Not all do. Time Warner for example leaves the port open but adds its residential IP blocks to one or more DNS Block lists, so that all mail that comes from them gets marked as spam by receivers who check against said lists.

I'd imagine using something like DDNS probably would cause a similar issue. Though idk.

If what you want to do is accept incoming mail, yeah not too many issues there - get a MX record pointed to where you want to accept mail. That is about it.

Where the problem comes in is sending, as mentioned already -- most of the major players will block you from sending them email from a dynamic IP. Even if not using a block list, do you have a valid PTR for this IP - not going to accept mail from you.

So if what you want to do is send mail to your friend billy on his HOME smtp server, then sure go for it. If what you want to do is send actual production email that your sure is going to get there. Not so much, not to any of the major player domains, or any companies doing any sort of decent filtering.

  • 5 months later...

I run my own exchange server. Receiving emails are OK but sending gives an error. Tested via Exchange Connectivity and its says that no PTR Record available for the IP. Any solution to this?

by the way, I use Zerigo as my Dynamic DNS.

receiving you will be fine, it is always the sending. Many isps have closed out bound port 25 traffic outside of their network when on their dynamic ip network. Many spam filters have excluded dynamic range from being able to get through. How do you get around the world denying you?

The option would be to send through a mail host, you can use your isp mail host, but they may have a sending limit.

receiving you will be fine, it is always the sending. Many isps have closed out bound port 25 traffic outside of their network when on their dynamic ip network. Many spam filters have excluded dynamic range from being able to get through. How do you get around the world denying you?

The option would be to send through a mail host, you can use your isp mail host, but they may have a sending limit.

Using my ISP Mail Host is a great idea. I don't mind if they have sending limit. Do I only require to get the SMTP for the ISP? or what else info is required?

yeah sure there are lots of people that provide FREE email servers for you to send your mail through :rolleyes:

If you want/need to send email - then you have to be ready to show your not some random box on the net sending spam. No business that needs to use email is going to be on a dynamic IP. Your also going to be able to setup a PTR because again your not a on dynamic IP and your ISP provides you the ability to change the name the IP resolves too. Only the owning ISP can do this, arin controls who where netblocks point for dns here in the US, other parts of the world would be other orgs, lacnic, ripe, apnic, afrinic

Shoot more and more companies are giving up on running their own mail and doing it in the cloud themselves - not even running their own email servers any more. Or contract out companies to be the front man to their exchange boxes - where this other network sends and recv the mail, and exchange gets mail from this company, and sends all email through them "smart host"

Here is the thing - running your own email server on a home connection for anything other than a hobby or for you to get mail from to some bs domain that gets a couple of mails a day and sends a few a day through your isp email server is nothing more than an exercise in futility.

More likely than not your prob just going to end up running a spam machine anyway ;)

edit: What version of exchange are you running? Look up how to setup smarthost. Keep in mind that many isp will not allow you to send mail from other than your email address, ie say account is [email protected] -- many will not allow you to send mail through their servers that say the email is from [email protected]

SMTP you will need as well as your account info to be able to authenticate and send mail through. You will need to send mail as this account though...the mail header needs to show this for your recipients to be able to receive mail. Unless they just do a ip check (which may be the case), but if they do any sort of resolve and the ip doesn't match the header host it won't make it through. There is a lot that goes on to verify authenticity of the sender in a spam filter.

edit: What version of exchange are you running? Look up how to setup smarthost. Keep in mind that many isp will not allow you to send mail from other than your email address, ie say account is [email protected] -- many will not allow you to send mail through their servers that say the email is from [email protected]

am using Exchange Server 2013 over Windows server 2008 R2 (which is a DC as well). My ISP is Saudi Net (worst ISP in the entire middle east with no support at all). Cant even request for PTR. Tried the SMTP for them but still not working, maybe am not configuring Exchange Server properly.

SMTP you will need as well as your account info to be able to authenticate and send mail through. You will need to send mail as this account though...the mail header needs to show this for your recipients to be able to receive mail. Unless they just do a ip check (which may be the case), but if they do any sort of resolve and the ip doesn't match the header host it won't make it through. There is a lot that goes on to verify authenticity of the sender in a spam filter.

I tried tons of ways but none work. Web Server was way easy configuring compared to exchange server :/

"Cant even request for PTR."

I don't know of any ISP that would setup PTR of a dynamic IP other than the generic ones you get.. For example

;; QUESTION SECTION:

;xx.xx.13.24.in-addr.arpa. IN PTR

;; ANSWER SECTION:

xx.xx.13.24.in-addr.arpa. 7200 IN PTR c-24-13-xx-xx.hsd1.il.comcast.net.

Now such a PTR might meet some filtering some domains do in the sense that it exists.. Others might reject it because its not a true reflection of the forward name.. So for example if your mail server IP is resolved via smtp.somedomain.tld, they might like the PTR of the IP that resolves to to reflect the same smtp.somedomain.tld

As I already mentioned, some ISPs won't allow their smtp servers to send mail for anything other than the account holder email address. So if your email address with your isp is [email protected] and your trying to send email from [email protected] - even if you auth with your specific account info, their server might tell you to get lost since the email address is not valid for that account.

Many ISPs don't even allow outbound on 25 from their dynamic client networks, nor allow their smtp server to send email for any other email address then what is listed on the specific account - this is to help reduce spam being sent from their network. If you have such restrictions then your only solution is to pay for a smarthost that allows you to send mail they forward on your behalf on a different port, etc. The dyndns company already mentioned provides such solutions. If you not willing to pay for such services - how are you affording exchange? ;)

If you not willing to pay for such services - how are you affording exchange? ;)

I can afford all the services, but I wanted to setup it for free at all. By the way, setting up all this was a part of my exercise. Wanted to learn about the Web hosting, Domain Controller, Email exchange. All was setup properly except this Exchange. I tried adding the PTR host in Zerigo (my Dynamic DNS service) it was done but my ISP really need to assign me a PTR record to my IP (which seems not possible for Dynamic IP Users). How about if I search for some free SmartHost providers before paying for something :rofl:

Edit: by the way, I get free license for Microsoft Products :D so trying all of them is not that bad :rolleyes:

Your not going to find a FREE smart host.. Not that I can think of - I don't even think google apps when it was free for your domains allowed that?

What would the smarthost get out of it? Other than prob blacklisted because you were using them to send spam ;)

You can study the setup of exchange without really having to send mail to all the major players.. Does your isp allow outbound of their network on 25? Simple enough to test, try connecting to a smtp server somewhere?

Cheap way you could do it is get yourself a VPS somewhere... I have a vps for $15 a year that would be more than capable of sending email for me, etc. And I can setup the PTR on the IP the host gave me. So it can be done for very cheap.

But again if all your doing is playing/learning does not matter if the major players will block you.. there are plenty of domains you can send to for testing that wont filter you.

So telnet to a smtp server on 25, can you connect - if so then your isp allows you to send outbound on 25 and could setup exchange to directly send.. Just some of the major players are not going to accept mail from you.

budman@ubuntu:~$ telnet mailin-01.mx.aol.com 25

Trying 205.188.159.42...

Connected to mailin-01.mx.aol.com.

Escape character is '^]'.

554- (RTR:DU) http://postmaster.info.aol.com/errors/554rtrdu.html

554 Connecting IP: 24.13.xx.xx

Connection closed by foreign host.

so you see my ISP allows me outbound on 25, but mail server for AOL told me to get lost ;) Because

54 RTR:DU[/url]

Cheap way you could do it is get yourself a VPS somewhere... I have a vps for $15 a year that would be more than capable of sending email for me, etc. And I can setup the PTR on the IP the host gave me. So it can be done for very cheap.

Where? can I get that too?

Will post the telnet results once I get the exact SMTP for the ISP :wacko:

smtp for the isp? Just do a dns look for any smtp server for any domain. Use aol for an example

As to a vps -- here are some listings of cheap ones

http://www.lowendbox.com/

http://lowendstock.com/

Mine is with http://buyvm.net/

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • It sounds like you’re trying to rewrite a narrative to align this layoff with your political beliefs. Games can be horrible, whatever backwards notions you have don’t change that bungie has problems, mostly with just bad games, and arrogance. When they pushed Microsoft to let them be independent they lost their way. They hired on a bunch of people and they couldn’t justify the employee count consistent with their revenue.
    • Trying out Noctalia v5 on CachyOS  
    • Calibre 9.10 by Razvan Serea  Calibre is an open source e-book library management application that enables you to manage your e-book collection, convert e-books between different formats, synchronize with popular e-book reader devices, and read your e-books with the included viewer. It acts as an e-library and also allows for format conversion, news feeds to e-book conversion, as well as e-book reader sync features and an integrated e-book viewer. Calibre's features include: library management; format conversion (all major ebook formats); syncing to e-book reader devices; fetching news from the Web and converting it into ebook form; viewing many different e-book formats, giving you access to your book collection over the internet using just a browser. Calibre 9.10 changelog: New features Content server: A new "modern" interface with a sidebar to ease navigation Content server: When used with HTTPS allow installation as a PWA (Progressive Web App) Edit book: Saved searches: When filtering the list of saved searches match by keywords CSS parsing: Add support for CSS Level 4 selectors Cover grid: When using an image larger than the viewport as a texture scale it to fit the viewport Annotations browser: Allow restricting displayed annotations by custom annotation styles as well Edit book: Compress images: Add option to convert PNG images to JPEG or WEBP Bug fixes E-book viewer: Fix IME on Windows not working when typing in notes for highlights Conversion: Heuristics: Improve performance in some pathological cases SNB Input: Fix error on some input files Windows: fix rare crash when too many notifications are displayed at once Fix duplicating of books not duplicating value from enumerated columns when the column has a default value defined Fix a regression in 9.8 that caused errors from AI plugin providers to be silently swallowed and not displayed to user Fix CSV export invalid when exporting comments field Disallow Python templates when reading book metadata (CVE-2026-53511) Improved news sources The Week Economist Espresso Horizons Download: Calibre 9.10 | Portable | ~200.0 MB (Open Source) Download: Calibre for MacOS | 327.0 MB Download: Calibre for Linux View: Calibre Home Page | Calibre Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • Malwarebytes Anti-Malware 5.6.1.257 by Razvan Serea Malwarebytes is a high performance anti-malware application that thoroughly removes even the most advanced malware and spyware. Malwarebytes version 5.**** brings comprehensive protection against today’s threat landscape so that you can finally replace your traditional antivirus. You can finally replace your traditional antivirus, thanks to a innovative and layered approach to prevent malware infections using a healthy combination of proactive and signature-less technologies. While signatures are still effective against threats like potentially unwanted programs, the majority of malware detection events already come from signature-less technologies like Malwarebytes Anti-Exploit and Malwarebytes Anti-Ransomware; that trend will only continue to grow. For many of you, this is something you already know, since over 50% of the users already run Malwarebytes as their sole security software, without any third-party antivirus. What's new in Malwarebytes 5.****: Unified user experience - For the first time, Malwarebytes now provides a consistent experience across all of our desktop and mobile products courtesy of an all new and reimagined user experience powered by a faster and more responsive UI all managed through an intuitive dashboard. Modern security and privacy integrations - Antivirus and ultra-fast VPN come together seamlessly in one easy-to-use solution. Whether you’re looking for a next-gen VPN to secure your online activity, or harnessing the power of Browser Guard to block ad trackers and scam sites, taking charge of your privacy is simple. Trusted Advisor - Empowers you with real-time insights, easy-to-read protection score and expert guidance that puts you in control over your security and privacy. Malwarebytes 5.6.1.257 changelog: Features and improvements Updated the sign-in section of the My Subscription page to clarify that users can activate their subscription by signing in with their Malwarebytes account. Updated the uninstall flow to collect more meaningful insights and address customer concerns. Refreshed the app's tutorial layout for a better look and feel. Issues fixed Fixed an outdated link when clicking Take action after running a Digital Footprint Scan. Miscellaneous bug fixes. Download: Malwarebytes 5.6.1.257 | 472.0 MB (Free, paid upgrade available) Links: Malwarebytes Website | Screenshot Get alerted to all of our Software updates on Twitter at @NeowinSoftware
  • Recent Achievements

    • Week One Done
      xvvxcvv earned a badge
      Week One Done
    • One Month Later
      xvvxcvv earned a badge
      One Month Later
    • Enthusiast
      Xonos went up a rank
      Enthusiast
    • Conversation Starter
      Admir earned a badge
      Conversation Starter
    • First Post
      The_Focal_Point earned a badge
      First Post
  • Popular Contributors

    1. 1
      +primortal
      405
    2. 2
      +Edouard
      168
    3. 3
      PsYcHoKiLLa
      129
    4. 4
      neufuse
      69
    5. 5
      Xenon
      68
  • Tell a friend

    Love Neowin? Tell a friend!