I have locked down relay and when some users outside my domain ex: user@yahoo.com email us they receive unable to relay(message below)
How do I allow these users to email us without relay denied
Delivery to the following recipient failed permanently:
USER@MYDOMAINNAME.COM
Technical details of permanent failure:
PERM_FAILURE: SMTP Error (state 9): 550 5.7.1 Unable to relay for USER@MYDOMAINNAME.COM
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
If you are getting some external email, then that would tend to rule out a problem with Exchange.
Normally if Exchange is not configured correctly then all email will fail.
Have you made any DNS changes recently?
Have you tried a telnet test in to the Exchange server to see if it throws back the same or similar error?
Simon.
You have to cut off the open relay first. I don't care if that is the only way that you receive email - anyone who knowingly puts an open relay server on the Internet should be fired. Yes I do feel that strongly about it. If your ISP finds that you are running an open relay you will probably have your connection cut off - most ISPs will not tolerate it either.
There should be no difference in receiving email from the webmail services to anyone else - as long as you or any application that you might be using haven't tried to restrict the senders in any way.
If you cannot receive any email with the relay options closed, and get the cannot relay messages, then that means Exchange doesn't know that it is responsible for delivery of email to that domain.
Check that recipient policy is configured correctly and is applying email addresses automatically to the user accounts. If you have to enter them manually then something isn't working correctly. You need to look at the event viewer to see if it flags anything about the recipient policy.
The other thing it might be is Exchange isn't updating the IIS Metabase with the new domain information. If that is happening then you have a more serious problem on your hands.
Simon.
RE:
If you cannot receive any email with the relay options closed, and get the cannot relay messages, then that means Exchange doesn't know that it is responsible for delivery of email to that domain.
Check that recipient policy is configured correctly and is applying email addresses automatically to the user accounts. If you have to enter them manually then something isn't working correctly. You need to look at the event viewer to see if it flags anything about the recipient policy.
Can you step me through the entire config process to make sure I am matching what you are suggesting ?
Recipient Policy...
ESM, Recipients, Recipient Policies. You will have at least one policy in there - the default.
If you look at the properties of that policy, then click on the tab "Email Addresses (Policy)" you should find at least one domain listed. Depending on your Active Directory domain configuration, this may, or may not be the same as your external domain.
For example, if your AD domain is domain.local then you would have the domain @domain.local in the list.
If that is the case, then you should also have @domain.com (or whatever your email domain is) listed in there as well.
If you don't - then Exchange doesn't know it is responsible for email being delivered to that domain. Putting the email addresses on to the accounts manually is not enough.
If you do have to add a domain in there, don't remove the default domain that matches your internal AD domain. That can cause problems. Add the new domain (@domain.com or whatever) and then make it the default. Leave the existing domain in place.
User accounts should be getting email addresses in the new domain automatically. If you have to add the email addresses in by hand later on, then recipient update services isn't working correctly.
Simon.
Here is the scenario:
We have two separate networks: 192.168.1.x and 192.168.2.x and an exchange server on each network.
Each network has its own Wan Address x.x.x.1 and x.x.x.2
One exchnage server domain is mail.contoso.com-mx record pointing to this address
Other exchange server domain is support.contoso.com with an MX record pointing to this address
Each Network hits the internet throught their own firewall on their segment.
The firewalls are switched via an internet switch and pass thru a Gateway Router which has everything open and travels on a single T1 circuit
Port 25 is open on each firewall
SMTP is open on each firewall to their respective WAN address and I can telnet to each address
NSLOOKUP - via each MX record yeilds a response from each exchange serveron their respective WAN address
Relay is not open
"when a user tries to email someone@contoso.com from an outside email ISP such as joe@yahoo.com emailing someone@contoso.com", joe gets a PERM_FAILURE: SMTP Error (state 9): 550 5.7.1 Unable to relay for someone@contoso.com
How can this be resolved?
Business Accounts
Answer for Membership
by: SembeePosted on 2006-03-14 at 13:33:32ID: 16188290
What do you mean by "Lock Down Relay"? What did you do?
Exchange 2003 is relay secure out of the box - the only change that some people need to make is remove the authenticated relay setting. Nothing else needs to be done.
Simon.