Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have an exchange server in the office that for a year or so has just used the built-in spam filters - we have added the SpamHaus IP addresses so that some basic spam filtering is done. However, this is no longer viable - we just get too much spam.

So we have looked at several SaaS Spam Filtering services, such as MX GuardDog. For it to work we need to change our MX records to point to the MX GuardDog IP addresses. Our setup is currently:

  • Host:
  • MX (for is

I think this is pretty much as you would expect.

Our static IP address has a reverse DNS entry set to point to My concern is that if we have to change our MX records to point to MX GuardDog, will this in itself not pose problems with revere DNS? I suppose, my question is the reverse DNS entry pointing to the host, or the MX record - if that makes sense? Or, put another way - if our MX record changes from to are we going to get reverse DNS problems, which in itself could cause certain email servers to block our mails?

share|improve this question

MX Records are for incoming mails, reverse DNS is checked for outgoing mails. Sending and receiving doesn't have to be handled through the same server. So if your MX record points to the SAAS Spamfilter, your send path is not affected. You will still send through and that A-record and PTR record stays the same.

side note: I've had many support cases like "since we changed our MX records to the SAAS Filter, our outgoing mails get rejected" - it was never related to RDNS, but always caused by misconfigured SPF records, so in case you have SPF records set up, make sure they explicitely allow to send mails. If there currently is a "mx" in your SPF record you probably need to change it for the move.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.