Currently using O365 with Auto Forwarding to an external domain for purpose of direct communication with 3rd party vendor. Client works with vendor directly and wants to use their internal distribution lists to forward "out" to the 3rd party domain which is a needed business practice. Sophos has a limitation in the name of security that does not allow forwarding of the messages "out" to the 3rd party domain.

NEW FEATURE should allow for "whitelist" of forwarding domains or a manual override that would allow forwarding from the customer's e-mail gateway with Sophos "out" to the 3rd party domain recipient.

Being told by support to circumvent Sophos to acheive this is a very unimpressive response and "solution".

https://techtreme.com/dnsprobefinished_nxdomain-error-identified-on-windows-mac-and-android

For those of you working with WordPress on a daily basis, errors specific to the CMS such because the white display of death or database connection error's are somewhat common occurrences. However, another subset of error's you will probably stumble upon are those tied to your internet connection and DNS. a very common error that Google Chrome users get when trying to browse to an internet page is DNSPROBEFINISHED_NXDOMAIN. this can be downright frustrating because suddenly you can not browse to your internet site or perhaps even anywhere at all.
If you are seeing this error while trying to get to your WordPress site, don’t worry, this is fairly simple to fix. check out the recommendations under on how to get connected again. this can also work for other browsers, such because Firefox, Edge, etc.

How to Fix DNSPROBEFINISHED_NXDOMAIN

Release and Renew IP Address

Windows
In Windows just open up command prompt via pressing the Windows logo key and R. Then type “cmd” and

Type in ipconfig /release and hit Enter. this will release your current IP address.

Then type in ipconfig /flushdns and hit Enter. this will flush your local DNS cache. you should see a “Successfully flushed the DNS resolver Cache” if it worked.

Then type in ipconfig /renew and hit Enter. this will renew your IP address.

You might also try resetting your IP settings and Winsock catalog with the following commands: netsh int ip set dns & netsh winsock reset.

An alternative way to flush and renew your DNS is simply via disabling your network adapter & re-enabling it.

Mac
To release and renew your IP address on a Mac, visit System Preferences…

Mac system preferences

Click on the network icon & then click “Advanced.”

Mac network advanced

Click the TCP/IP tab heading if you are not already in there. Then click on the “Renew DHCP” lease button.

Just like we did above in Windows, Mac customer can also clear their local DNS cache. Although this is done in a special place. visit Utilities and then click on “Terminal.”

Enter in the following command:

Fix DNSPROBEFINISHED_NXDOMAIN on Chromebook

Before you start, ensure that your Chromebook computer is connected to network (Wi-Fi or Ethernet)
Click on Time panel in the bottom right corner.
Now, click on Connected to [your network name].
Here, click Network.
Choose Google name servers option.

If you forget your Fate Grand Order account password and you facing problem in opening your account, to fate grand order account recovery na you’ll use these steps, first, you've got to go to the fate grand order account login page, you’ll get the choice of submitting the email/phone number that’s linked to your account. Then click on the Next button to submit that information.vAfter this, you'll be receiving the recovery code to your email address that's associated with your fate grand order account. Enter that code within the given space and click on the next button. now you'll be allowed to make a replacement password for your account, now click on the confirmation button and your password is going to be reset. By using these steps you'll be ready to Recover your fate grand order Account quickly.
More Details Visit: https://webaccountshelp.com/fate-grand-order-account-recovery

For any incoming mail ,sophos ESA needs to do reverse DNS lookup (PTR Record) for incoming domain MTA before accepting connection and process mails.

This should be done at first level whenever sending MTA trying to make connection with our ESA MTA.

If incoming mail domain do not have valid PTR record,then connection should be rejected at that point before any processing / checking at ESA MTA policy level.

This is additional Anti-Spam technique to thwart spamming and spoofing based fraudulent mails.

This is also called Forward Reverse DNS lookup match.

A record of incoming MTA should exactly matched with PTR record of incoming MTA IP address for any legitimate incoming emails.

e.g
Our sophos ESA MTA is responsible for sending emails for our domain i.e opalindia.in

MTA DNS A record (smtp.opalindia.in ): 117.239.33.39
MTA Reverse DNS PTR record (117.239.33.39): smtp.opalindia.in