Error: "554 5.7.1 Rejected message by MTA, EHLO domain does not exist in DNS"

Products

• Messaging Gateway

Issue/Introduction

You are not getting mail messages to complete in Symantec Messaging Gateway (SMG) due to unavailability of reverse DNS record for an IP address.

554 5.7.1 Rejected message by MTA, EHLO domain does not exist in DNS

Environment

Messaging Gateway

Cause

The sender's DNS records do not have a valid 'A', 'AAAA', nor 'MX' entry for the domain presented in the HELO/EHLO commands.

and

You have rejection of messages that fail HELO/EHLO reverse DNS checks enabled.

Resolution

The best solution is to have the owner of the IP addresses' DNS records add a PTR record to resolve that IP to a fully qualified domain name (FQDN).

You can also disable the check in SMG:

1. Log into the Control Center as admin.
2. Click Protocols.
3. Click Settings.
4. Uncheck Reject connections where the domain provided at HELO and EHLO has neither an 'A', nor an 'AAAA', nor an 'MX' record in DNS.
5. Click Save.