553 sorry, that domain isn't in my list of allowed rcpthosts (#5.7.1)

The domain that you are sending to has been blacklisted by the recipient's email server.  It is either because the recipient's email server had received virus from the domain that is blacklisted OR because the recipient's email server had perceived too spam and is blacklisting the sending server.  

If your server is blacklisted - you need to call the administrator the other email server and ask him to look at the list for the reason why you are being blacklisted.  Yours may be blacklisted because the other server sentry software had automatically blacklisted you.

Check for the fizzer virus on your system as well.  It will cause similar situation.

I have our exchange server configured correctly to not function as an open relay and there's no way our little company sends enough email to be considered a spammer.

This is in response to email we're sending.

I'll look at the possibility, though.  Could it be anything else?

error 5.7.1 is generated for the following reasons

-General access denied, sender access denied—the sender of the message does not have the required permissions necessary to complete delivery.

-You are trying to relay your mail through another SMTP server, and the server does not permit you to relay.

-The recipient may have mailbox delivery restrictions enabled. For example, if a recipient’s mailbox delivery restriction is set to receive mail from a distribution list only, non-member’s mail will be rejected and produce this error.

your problem is more related to the relay through another related SMTP server.

How is your Exchange server configured to send SMTP mail? Is it using a Smart-Relay host, or is it using DNS to deliver mail?

How long has it been set up this way? Do you have problems with any other domains? Can you tell us the domain name in question?

fairoakian,

The problem is that email from your domain to another domain is being blocked, either by an authorized sender domain only list (it sounds like it is) or quarantined domain list (manually by administrator or automatically by detection software) because of virus or spaming relay.
 
In the virus case, your users may have had or may have an infection.  The virus may have used user's address book and send email in volume, or the virus may be using your server as a relay.  Best course of action to narrow down the problem is to make a couple of phone calls to admins, whose domain email system is blocking your email.  They will be glad to look at their log and tell you if you are blocked and why?

Check your network for virus/worm/trojan such as fizzer, search www.symantec.com for "fizzer" virus/worm/trojan.

We're using DNS to deliver mail.  The domain in question is allstate.ca.  It's been setup this way for years and currently we can send out to everybody except allstate...as far as I can tell.

I've already checked 80% of the network for specific viruses and most of them have virusscan and I have scanmail on the exchange server, so I doubt it's a virus.  I'll keep checking though.  What does the part about the recipient name not being recognized mean?

Basically, you're trying to send a message to user@place, and it doesn't understand place as being allowed on its system. Can you post more of the message that you got indicating the error? I don't think the user part matters, but it might be helpful to see the @place part as well as any more details about the error (including the fully qualified domain of the server and/or ip of the server that is generating the message you put up above).

Have you called allstate.ca email admin and ask him/her to check if you are being blocked or his/her DNS mail entry has recently change and that the change has not been propogated yet (up to 72 hours).

Thanks for all the replies.  I got ahold of their IT department and they confirmed what I've been saying, that we are not banned.  So this is something else...anything you think I should check or test that might help illuminate the problem?

Please post information relative to the error if you are able. I realize that certain components you might want to edit out for security's sake, but please post what you can.

Also, if you can provide the message headers that are part of the "error" e-mail you got, that might prove useful as well.

There's something.  The Internet header is blank.  It's not getting past our Exchange server apparently.

Here's the undeliverable email in it's entirety with only our domain edited.

The following recipient(s) could not be reached:

      Elaine A (E-mail) on 9/30/2003 3:05 PM
            The recipient name is not recognized
      The MTS-ID of the original message is: c=US;a= ;p=DOMAIN;l=SERVER1-030930220422Z-2212
            MSEXCH:IMS:DOMAIN:HR:SERVER2 3553 (000B09AA) 553 sorry, that domain isn't in my list of allowed rcpthosts (#5.7.1)

Are you sending this message using a POP/SMTP client? Or, are you using Outlook?

I would expect this type of message if you were trying to relay mail through your own server using a SMTP client instead of one like Outlook. The odd part, is that you say you do not have this problem for other domains.

Using Outlook.  Nothing has changed for a couple months and every other domain I've tested works.  Until two days ago, we could send to them with no problem.

This isn't an Exchange message, though, is it?  Searches for this error message and the phrase "exchange 5.5" have been totally fruitless.  This error message almost always accompanies the program QMAIL.  Does that mean it can't be my Exchange server?

The message you started this thread with is being generated by an Exchange server.

Where does QMail fit into this? Me thinks we need more details again... :)

Thanks for clarifying.  I'm just puzzled by the lack of information on this error as it pertains to Exchange 5.5.  QMail only fits into this because when I search for this error in google all I find is info about Qmail.  I was beginning to wonder if this message was coming from Qmail somehow...but I guess not.

fariroakian,

"mburdick, where does Qmail fit into this?" (read below)

The message that you posted,
    The MTS-ID of the original message is: c=US;a= ;p=DOMAIN;l=SERVER1-030930220422Z-2212
           MSEXCH:IMS:DOMAIN:HR:SERVER2 3553 (000B09AA) 553 sorry, that domain isn't <snip> allowed rcpthosts (#5.7.1)

Part 1 comes from your exchange server - Part 2 comes from the other mail server.  The explanatory reply is send back and is displayed by your server.  It works this way because messages can be customized.  You need to contact the admin of the host that sends back the reply to find out why it's rejecting the relay of the domain addressed in your email, especially if you haven't changed anything (such as your smtp address space).  The message is from MTS so it's Internet Service to Internet Service communication.

The host server name is the "SERVER2" in your message.  It may just be a relay mail server from your ISP and they may be using QMail and such.  If you don't know whose email host it belongs to - use tool such as trace router, NSLookup to find the IP address and then track down the owner.

I think I found the problem.  DNS is messed up somehow.  I tried going to www.allstate.ca and got a site called cyberbrowse.  same for futureshop.ca.  So, somebody has, apparently, hijacked?, the DNS server we use and added their ip addresses to the other companies' domain names.  Only scary part is that we're using SBC DNS server addresses.

I had someone not on SBC get the ip address for allstate.ca and now we can see that site internally, but I need to get the ip address of the mail server and mx records and whatnot now.

Am I on the right track?  Everybody else see allstate.ca just fine?  Ever hear of cyberbrowse?

Not spyware because it's happening from any computer trying to send mail from our domain (through our exchange server).  I know what DNS hijacking is...what's poisoning?

http://www.securityfocus.com/guest/17905

They can say it a lot better than I can...  :)

That was definitly the problem.  Got the ip address and host name from allstate and added it internally and the problem is solved.  Been trying to let SBC know they've got a DNS attack on their hands, but can't get ahold of anybody.

May be, SBC is big.... if DNS cache poisoning is happening with them then there would be a lot more rejection from your site.  If your site is using them (as the ISP), then your mail server is using their host as mail relay.  If their DNS cache is poisoned, it would not limit to just one site.

553 sorry, that domain isn't in my list of allowed rcpthosts
Choice Mail
Go Daddy

This can be due to editing of the hosts file, some spyware blockers like Spybot S+D add domains to this list to block them

I am trying to send mail using using Outlook through an amplified signal wireless network at an RV resort.  Everything I send generates the error, 553 sorry, that domain isn't in my list of allowed rcpthosts (#5.7.1).   Is there a setting that needs to be changed in the wireless host server software or is the problem with my machine?