Exchange Server Forums
Forums |
Register |
Login |
My Profile |
Inbox |
RSS 
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
Error 550 5.7.1 Access denied
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login  | |
|
Error 550 5.7.1 Access denied - 10.Oct.2007 2:51:37 PM
|
|
|
scottew
Posts: 8
Joined: 16.May2006
Status: offline
|
We are running Exchange 2003 SP2 on Win2k3 SP2 and have issues sending to one domain. This is the error that I have been receiving
user@dcf.state.fl.us on 10/10/2007 8:43 AM
You do not have permission to send to this recipient. For assistance, contact your [link=http://tek-tips.com/viewthread.cfm?qid=1415994&page=1#]system[/link] administrator.
<mail.mydomain.com #5.7.1 [link=http://tek-tips.com/viewthread.cfm?qid=1415994&page=1#]smtp[/link];550 5.7.1 Access denied>
When I track the message in the ESM, this is what I get...
10/10/2007 SMTP Store Driver: Message submitted to Store
10/10/2007 SMTP: Message submittted for Advanced Queuing
10/10/2007 SMTP: Started message submission to Advanced Queing
10/10/2007 SMTP: Message Routed and Queued for Routing
10/10/2007 SMTP: Started Outbound Transfer of Message
10/10/2007 SMTP: Non-Delivered Report (NDR) Generated
It looks like it isn't even getting to the recipients mail server, but I'm not sure. I have checked on DNS Stuff to make sure we aren't listed in any SPAM databases.
Any help on what I need to check would be greatly appreciated.
Thanks in advance.
Scott
|
|
|
|
|
RE: Error 550 5.7.1 Access denied - 10.Oct.2007 4:12:49 PM
|
|
|
uemurad
Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
|
How many times has the same user attempted to send the message? I got an interesting response when I tested with Telnet.
The first time I typed in RCPT TO, it told me that as a first-time sender it was treating my message as spam.
I repeated the telnet session, and the second time it responded OK to the RCPT TO command.
Not knowing a valid address in that domain, I did not proceed.
_____________________________
Regards,
Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com
|
|
|
|
|
RE: Error 550 5.7.1 Access denied - 10.Oct.2007 4:28:52 PM
|
|
|
scottew
Posts: 8
Joined: 16.May2006
Status: offline
|
Thank you for the response.
And my apologies.....I didn't realize how awful that post turned out when I copied/pasted some things.
Anyway, I have tried to send several emails to the same person and others as well.
Perhaps this would be more helpful to test a valid email account.
Your message did not reach some or all of the intended recipients.
Subject: RE: Problems sending email to your domain
Sent: 10/10/2007 8:43 AM
The following recipient(s) could not be reached:
kristina_Vaz@dcf.state.fl.us on 10/10/2007 8:43 AM
You do not have permission to send to this recipient. For assistance, contact your system administrator.
<mail.factorhealth.com #5.7.1 smtp;550 5.7.1 Access denied>
Thanks,
Scott
|
|
|
|
|
RE: Error 550 5.7.1 Access denied - 10.Oct.2007 5:13:20 PM
|
|
|
uemurad
Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
|
Interesting - I am able to create an entire message stream. Are you sure the issue isn't at your end? Are you attempting to send the message from an address not yourself (Send As)?
_____________________________
Regards,
Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com
|
|
|
|
|
RE: Error 550 5.7.1 Access denied - 10.Oct.2007 7:59:40 PM
|
|
|
scottew
Posts: 8
Joined: 16.May2006
Status: offline
|
I am attempting to send from my own email account and others have tried from their accounts.
The problem may be on our end, I'm just not sure what exactly to check. I definitely not an Exchange expert.
Thanks,
Scott
|
|
|
|
|
RE: Error 550 5.7.1 Access denied - 10.Oct.2007 9:48:49 PM
|
|
|
uemurad
Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
|
What I generally advise people to do is to simulate a message transfer from your system to the outside system. By using Telnet, you issue individual commands and you can see how the other system reacts. Any responses besides OK should be considered.
I have written up instructions:
http://exchangeguy.blogspot.com/2007/06/using-telnet-to-simulate-server.html
_____________________________
Regards,
Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com
|
|
|
|
|
RE: Error 550 5.7.1 Access denied - 11.Oct.2007 8:33:09 AM
|
|
|
scottew
Posts: 8
Joined: 16.May2006
Status: offline
|
I ran test using Telnet and the SMTPDIAG tool from our Exchange box and below are the results from both.
Thanks for all the help.
Scott
TELNET RESULTS
220 mail.factorhealth.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.1830 r
eady at Thu, 11 Oct 2007 08:06:52 -0400
ehlo dcf.state.fl.us
250-mail.factorhealth.com Hello [72.242.62.18]
250-TURN
250-SIZE 30720000
250-ETRN
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-8bitmime
250-BINARYMIME
250-CHUNKING
250-VRFY
250-X-EXPS GSSAPI NTLM LOGIN
250-X-EXPS=LOGIN
250-AUTH GSSAPI NTLM LOGIN
250-AUTH=LOGIN
250-X-LINK2STATE
250-XEXCH50
250 OK
mail from:swilliams@factorhealth.com
250 2.1.0 swilliams@mail.factorhealth.com....Sender OK
rcpt to:kristina_Vaz@dcf.state.fl.us
550 5.7.1 Unable to relay for kristina_Vaz@dcf.state.fl.us
SMTP DIAG RESULTS
D:\Downloads\SmtpDiag>smtpdiag "swilliams@factorhealth.com" "kristina_Vaz@dcf.st
ate.fl.us" /v
Searching for Exchange external DNS settings.
Computer name is FHMEXCH.
VSI 1 has the following external DNS servers:
There are no external DNS servers configured.
Checking SOA for dcf.state.fl.us.
Checking external DNS servers.
Checking internal DNS servers.
Checking TCP/UDP SOA serial number using DNS server [10.0.0.2].
TCP test succeeded.
UDP test succeeded.
Serial number: 10019733
SOA serial number match: Passed.
Checking local domain records.
Starting TCP and UDP DNS queries for the local domain. This test will try to
validate that DNS is set up correctly for inbound mail. This test can fail for
3 reasons.
1) Local domain is not set up in DNS. Inbound mail cannot be routed to
local mailboxes.
2) Firewall blocks TCP/UDP DNS queries. This will not affect inbound mail,
but will affect outbound mail.
3) Internal DNS is unaware of external DNS settings. This is a valid
configuration for certain topologies.
Checking MX records using TCP: factorhealth.com.
MX: mail.factorhealth.com (0)
A: mail.factorhealth.com [72.242.62.18]
Checking MX records using UDP: factorhealth.com.
MX: mail.factorhealth.com (0)
A: mail.factorhealth.com [72.242.62.18]
Both TCP and UDP queries succeeded. Local DNS test passed.
Checking remote domain records.
Starting TCP and UDP DNS queries for the remote domain. This test will try to
validate that DNS is set up correctly for outbound mail. This test can fail for
3 reasons.
1) Firewall blocks TCP/UDP queries which will block outbound mail. Windows
2000/NT Server requires TCP DNS queries. Windows Server 2003 will use UDP
queries first, then fall back to TCP queries.
2) Internal DNS does not know how to query external domains. You must
either use an external DNS server or configure DNS server to query external
domains.
3) Remote domain does not exist. Failure is expected.
Checking MX records using TCP: dcf.state.fl.us.
MX: dohsmsi05.doh.state.fl.us (4)
MX: dohsmsi04.doh.state.fl.us (4)
A: dohsmsi05.doh.state.fl.us [205.176.88.26]
A: dohsmsi04.doh.state.fl.us [167.78.1.120]
Checking MX records using UDP: dcf.state.fl.us.
MX: dohsmsi04.doh.state.fl.us (4)
MX: dohsmsi05.doh.state.fl.us (4)
Both TCP and UDP queries succeeded. Remote DNS test passed.
Checking MX servers listed for kristina_Vaz@dcf.state.fl.us.
Connecting to dohsmsi04.doh.state.fl.us [167.78.1.120] on port 25.
Received:
220 dohsmsi04.doh.state.fl.us ESMTP Sendmail 8.12.11.20060308/8.12.11; Thu, 11 O
ct 2007 08:24:41 -0400
Sent:
ehlo factorhealth.com
Received:
250-dohsmsi04.doh.state.fl.us Hello mail.factorhealth.com [72.242.62.18], please
d to meet you
250 ENHANCEDSTATUSCODES
Sent:
mail from: <swilliams@factorhealth.com>
Received:
550 5.7.1 Access denied
Error: Expected "250". Server rejected the sender address.
Failed to submit mail to dohsmsi04.doh.state.fl.us.
Connecting to dohsmsi05.doh.state.fl.us [205.176.88.26] on port 25.
Error: Expected "220". Server is not accepting connections.
Failed to submit mail to dohsmsi05.doh.state.fl.us.
|
|
|
|
|
RE: Error 550 5.7.1 Access denied - 11.Oct.2007 10:45:58 AM
|
|
|
uemurad
Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
|
A couple of things concern me about your tests.
First, in your Telnet test it looks like you telnetted to your own server instead of the recipient's server. Was that intentional?
Second, with the SMTPdiag test the recipient's server rejected your address. When I manually tested telnet using your address I did receive a 250-OK response. You may want to run SMTPdiag again.
_____________________________
Regards,
Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com
|
|
|
|
|
RE: Error 550 5.7.1 Access denied - 11.Oct.2007 10:57:23 AM
|
|
|
scottew
Posts: 8
Joined: 16.May2006
Status: offline
|
Ok, I telnetted into their server and this is what I got.
220 dohsmsi04.doh.state.fl.us ESMTP Sendmail 8.12.11.20060308/8.12.11; Thu, 11 O
ct 2007 10:50:22 -0400
ehlo factorhealth.com
250-dohsmsi04.doh.state.fl.us Hello mail.factorhealth.com [72.242.62.18], please
d to meet you
250 ENHANCEDSTATUSCODES
mail from:swilliams@factorhealth.com
550 5.7.1 Access denied
I ran the SMTP diag test again and I got the same results.
Another problem that someone reported to me yesterday is that we are unable to receive email from Gmail (google) accounts although we can send to them without any problems.
This is the rejection I get when I tested it from my Gmail account...
Delivery to the following recipient failed permanently:
swilliams@factorhealth.com
Technical details of permanent failure:
TEMP_FAILURE: Could not initiate SMTP conversation with any hosts:
[mail.factorhealth.com. (0): Connection reset by peer]
Could this be a DNS issue on our end?
Thanks,
Scott
|
|
|
|
|
RE: Error 550 5.7.1 Access denied - 11.Oct.2007 11:07:18 AM
|
|
|
uemurad
Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
|
I sent you several test messages. One via telnet, one from Yahoo, one from Gmail. I tested a telnet connection to the recipient again and it still accepts your address. That makes me wonder if you are on a block list via your IP address. Test telnet from a system with a different public IP address (e.g. even your home PC would work if your ISP allows port 25 traffic).
_____________________________
Regards,
Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com
|
|
|
|
|
RE: Error 550 5.7.1 Access denied - 11.Oct.2007 11:43:46 AM
|
|
|
scottew
Posts: 8
Joined: 16.May2006
Status: offline
|
I logged into one our remote locations and tested the telnet again. First I got a similar response that said it treated it as SPAM. But the second time it went through fine.
I have an account on DNS Stuff and have checked that we are not in any SPAM databases and also have the RBL Alerts set up but have never received anything. I have also check other RBL checking sites but nothing comes up.
Thanks,
Scott
|
|
|
|
|
RE: Error 550 5.7.1 Access denied - 11.Oct.2007 12:03:26 PM
|
|
|
uemurad
Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
|
Your findings are consistent with my suspicions. Do you have a contact at that recipient domain? I would suggest you find out what type of filtering they have in place that would block via sending IP address.
Just to confirm when you speak to them, their gateway system is a SendMail server. I don't know if they use Exchange, but don't let them tell you there is no blocking in place unless it relates specifically to their SendMail system (I issue that warning based on personal experiences).
_____________________________
Regards,
Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
Printable Version
