Resolved fail

[truvan]

Hi,

Does anyone know what history log field "resolved" means? Emails from our exchange server go out through FML in gateway mode, and they get through without problems (action for outbound mails is BYPASS), but all outgoing mails in history log have same status in resolved field - FAILED. Other statuses for incoming is OK for good mail, FAIL and FORGED usually means spam because of some sort of DNS mismatch.

It is DNS resolving issue, but I dont konw why internal exchange isnt resolved. Nslookup form FML shows good PTR and A records. We use internal DNS servers, and all works well exept this thing. Nowhere in documentation is clearly stated what RESOLVED resolves (IP to DNS name, helo/ehlo banner to PTR or some other combination).

This is log example:

Column Content

 # 14884

 Date 2015-05-21

 Time 13:21:47

 Classifier Not Spam

 Disposition Accept

 From xxx@domain.com

 To xxx@otherdomain.com

 Subject Subject Subject

 Session ID t3MBLlQt023378-t3MBLlQu023378

 Client [192.168.x.x]  - real IP is here, belonging to Exchange server not sure why it isnt resolved to name

 Destination IP 192.168.x.x - Fortimail address

 Length 63609

 Direction out

 Mailer mta

 Policy IDs 2:4:0

 Resolved FAIL

 Log ID 0200023379

Level information

Type statistics

Thanks,

Ivan

[Bromont_FTNT · Accepted solution]

By default the Fortimail won't try resolving private IPs (including reverse lookup)

Try the following at CLI:

#config system dns

#set private-ip-query enable

#end