What does “5.7.25 Access denied, the sending IPv6 address [2a01:111:f200:2004::240] must have a reverse DNS record” mean?
The server sent over IPv6 from an address with no PTR record.
Last read from the sources at the foot of this page.
Access denied, the sending IPv6 address [2a01:111:f200:2004::240] must have a reverse DNS record
What does it mean?
Reverse DNS turns the address back into a host name. Microsoft requires it for mail over IPv6.
What exactly does the source say?
5.7.25 Access denied, the sending IPv6 address [2a01:111:f200:2004::240] must have a reverse DNS record The sending IPv6 address must have a reverse DNS record to send email over IPv6.
Why would a small firm see it?
A server that sends directly over IPv6, often one set up by a web host.
How do I fix it?
- Find the server from the bounce.
- Send through your mail provider instead, or have the company that holds the address set a PTR record.
Where does this come from?
- Microsoft: Email non-delivery reports and SMTP errors in Exchange Onlinelearn.microsoft.comRead 14 October 2026
See what is open before anyone else does.
We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.
- We read your firm from outside.
- You see what is open, with the proof for the lead finding.
- If it is worth it, you order.
What happens if you go ahead. More at getleaktrace.com/see-it-first/.
Read the transcript
- 72 hours. One domain. Nothing to install.
- Discover. Every way in, found from outside.
- Validate. Every finding, proven. Dated and checkable by anyone.
- Close. Forged email: one click per step, where we reach your DNS host and you approve it.
- You get the fix for the rest, step by step, and we re-check until it is closed.
- Monitor. On monitoring: email settings, look-alikes and new host names re-checked every hour. Alerts within the hour.
- Every paid assessment is human-verified before release.
- The AI defense layer for businesses. getleaktrace.com/see-it-first/