Hey Guys,
I am in some sort of a conundrum here. Our domain recently got put on a blacklist because one of our hub servers got a virus. I was able to get us off of most but the remaining one is asking that I set up my rdns record correctly. I will contact our ISP for this but the thing is the IP that got put on the blacklist is the IP assigned to the physical external port on our firewall (ASA 5520). This IP really should not have a rdns because it is not binded to anything that needs a dns record. We have 2 hub transport servers each assigned its own public IP. I have a records and mx records assigned to them both internally and externally (hostnames are different on inside from outside for security). The public IP of the hub transport servers is set up through a static NAT on the firewall. I just got off the phone with Cisco support and we ran through some tests that showed that all traffic coming from the hub servers does go out with the correct public IP. Problem is it seems as through when mail is sent from clients inside the network the ip it is tagged with when it leaves the network is the IP assigned to the external port of the firewall not the public IP assigned to either one of the hub servers. Is there a way to force all email to first go to the hub servers and out that server to the outside with the public IP of whatever hub transport server it is being sent from? Is this some kind of setting in the send connector or is it something that needs to be done on the switch side?
Thanks for your help.