Error: "554 5.7.1 Rejected message by MTA, EHLO domain does not exist in DNS"

book

Article ID: 171602

calendar_today

Updated On:

Products

Messaging Gateway

Issue/Introduction

You are not getting mail messages to complete in Symantec Messaging Gateway (SMG) due to unavailability of reverse DNS record for an IP address.

554 5.7.1 Rejected message by MTA, EHLO domain does not exist in DNS

Cause

The sender's DNS records do not have a valid 'A', 'AAAA', nor 'MX' entry for the domain presented in the HELO/EHLO commands.

and

You have rejection of messages that fail HELO/EHLO reverse DNS checks enabled.

Environment

Messaging Gateway

Resolution

The best solution is to have the owner of the IP addresses' DNS records add a PTR record to resolve that IP to a fully qualified domain name (FQDN).

You can also disable the check in SMG:

  1. Log into the Control Center as admin.
  2. Click Protocols.
  3. Click Settings.
  4. Uncheck Reject connections where the domain provided at HELO and EHLO has neither an 'A', nor an 'AAAA', nor an 'MX' record in DNS.
  5. Click Save.