关于imail的反向DNS解析问题

梦中的风

客户发邮件去国外<br>
SMTP日志里面显示<br>
client host rejected:cannot find your hostname<br>
<br>
这个说明我的这台邮件服务器没有反DNS解析<br>
<br>
我想问问怎么做反DNS解析<br>
<br>
我自己有一台dns服务器 里面是这么做的<br>
mail.xxxxx.com --- IP<br>
<br>
在IMAIL里使用的虚拟用户的地址都是把他们的MX记录指向mail.xxxx.com<br>
按理来说 应该这样形成了一个反dns系统<br>
但是实际上还是发送不了国外去<br>
<br>
求高人解答

钉子

反解不是这样的概念，反向解析，即把IP地址解析为主机名。而不是在DNS管理中设定成指定到对应IP的操作，这属于正向解析。

badwrs2000

C:\>ping -a 209.238.238.38<br>
<br>
Pinging www.hakassoc.com [209.238.238.38] with 32 bytes of data:<br>
<br>
Request timed out..............................<br>
<br>
<br>
这个就是反向的查看方法

badwrs2000

反向是从ip到域名的过程！<br>
需要ISP提供的，也可以由ISP授权你某个DNS服务器做反向解析服务。

badwrs2000

How Reverse DNS Works<br>
or, "Almost a Reverse DNS FAQ"<br>
Reverse DNS turns an IP address into a hostname -- for example, it might turn 192.0.2.25 into host.example.com.<br>
For your domains, standard DNS (turning a hostname into an IP address, such turning host.example.com into 192.0.2.25) starts with the company (registrar) that you registered your domains with. You let them know what DNS servers are responsible for your domain names, and the registrar sends this information to the root servers (technically, the parent servers for your TLD). Then, anyone in the world can access your domains, and you can send them to any IP addresses you want. You have full control over your domains, and can send people to any IPs (whether or not you have control over those IPs, although you should have permission to send them to IPs that are not yours).<br>
<br>
Reverse DNS works in a similar method. For your IPs, reverse DNS (turning 192.0.2.25 back into host.example.com) starts with your ISP (or whoever told you what your IP addresses are). You let them know what DNS servers are responsible for the reverse DNS entries for your IPs (or, they can enter the reverse DNS entries on their DNS servers), and your ISP gives this information out when their DNS servers get queried for your reverse DNS entries. Then, anyone in the world can look up the reverse DNS entries for your IPs, and you can return any hostnames you want (whether or not you have control over those domains, although you should have permission to point them to hostnames that are not on your domains).<br>
<br>
So for both standard DNS and reverse DNS, there are two steps: [1] You need DNS servers, and [2] You need to tell the right company (your registrar for standard DNS lookups, or your ISP for reverse DNS lookups) where your DNS servers are located. Without Step 2, nobody will be able to reach your DNS servers.<br>
<br>
If you can comprehend the above paragraphs (which takes some time), you'll understand the biggest problem that people have with reverse DNS entries. The biggest problem people have is that they have DNS servers that work fine with their domains (standard DNS), they add reverse DNS entries to those servers, and it doesn't work. If you understand the above paragraphs, you'll see the problem: If your ISP doesn't know that you have DNS servers to handle the reverse DNS for your IPs, they won't send that information to the root servers, and nobody will even get to your DNS servers for reverse DNS looksups.<br>
<br>
Basic Concepts: <br>
<br>
Reverse DNS turns 192.0.2.25 into host.example.com (an IP address into a host name). <br>
Typical reverse DNS lookup path: DNS resolver => root servers => ARIN (North American IP registry) => Local ISP => Acme Inc. DNS servers. <br>
Whoever supplies your IP addresses (usually your ISP) MUST either [1] set up your reverse DNS entries on their DNS servers, or [2] "delegate authority" for your reverse DNS entries to your DNS servers. <br>
Reverse DNS entries use a host name with a reversed IP address with ".in-addr.arpa" added to it -- for example, "25.2.0.192.in-addr.arpa". <br>
Reverse DNS entries are set up with PTR records (whereas standard DNS uses A records), which look like "25.2.0.192.in-addr.arpa. PTR host.example.com" (whereas standard DNS would look like "host.example.com. A 192.0.2.25"). <br>
All Internet hosts should have a reverse DNS entry (see RFC1912 section 2.1). <br>
Mail servers with no reverse DNS will have a hard time getting mail to certain large ISPs. <br>
Very Common Myth: <br>
Myth: If you have a reverse DNS entry listed in your DNS server, you have reverse DNS properly set up.<br>
Fact: This is often not the case. You need TWO things in order to have your DNS set up properly: <br>
1. Your DNS servers (or your ISP's) MUST have the reverse DNS entries set up ("25.2.0.192.in-addr.arpa. PTR host.example.com"). <br>
2. AND your ISP or bandwidth provider MUST set up the reverse DNS on their end, so that DNS resolvers around the world will know that your DNS servers are the ones to go to when looking up the reverse DNS for your IP addresses. <br>
How a reverse DNS lookup is accomplished: <br>
The DNS resolver reverses the IP, and adds it to ".in-addr.arpa", turning 192.0.2.25 into 25.2.0.192.in-addr.arpa. <br>
The DNS resolver then looks up the PTR record for 25.2.0.192.in-addr.arpa. <br>
The DNS resolver checks asks the root servers for the PTR record for 25.2.0.192.in-addr.arpa. <br>
The root servers refer the DNS resolver to the DNS servers in charge of the Class A range (192.in-addr.arpa, which covers all IPs that begin with 192). <br>
In almost all cases, the root servers will refer the DNS resolver to a "RIR" ("Regional Internet Registry"). These are the organizations that allocate IPs. In general, ARIN handles North American IPs, APNIC handles Asian-Pacific IPs, and RIPE handles European IPs. <br>
<br>
<br>
The DNS resolver will ask the ARIN DNS servers for the PTR record for 25.2.0.192.in-addr.arpa. <br>
The ARIN DNS servers will refer the DNS resolver to the DNS servers of the organization that was originally given the IP range. These are usually the DNS servers of your ISP, or their bandwidth provider. <br>
<br>
<br>
The DNS resolver will ask the ISP's DNS servers for the PTR record for 25.0.2.192.in-addr.arpa. <br>
The ISP's DNS servers will refer the DNS resolver to the organization's DNS servers. <br>
<br>
<br>
The DNS resolver will ask the organization's DNS servers for the PTR record for 25.0.2.192.in-addr.arpa. <br>
The organization's DNS servers will respond with "host.example.com".