Host Down issues on 7.6.1-022 ESA

[warnerro1]

   We recently brought online a new ESA using 7.6.1-022. Our previous version is 6.5.1-005.

On the new ESA, we are seeing a backup of mail in the delivery status page showing host is down. gmail.com, yahoo.com, and verizon.net are some of the domains. The mail is not backing up on the old box.

I have gone over the configs several times and can not find any discrepancies.

Any assistance is appreciated.

[Ken Stieers · Accepted solution]

Does the new box have a different IP than the old box?

If so, does the pointer record for it match?

Does the SPF record "allow" this IP to send mail for your domain(s)?

With that many big providers failing, I'd bet on reverse lookup or spf record issues.

[warnerro1]

You were correct. We found the issue--the firewall was not configured with the new IP of the Ironport. Thanks!