Jim Z
asked on
550 5.7.1 Unable to relay
We switched an Exchagne Server 2007. Previously we had user connecting to our old server via pop3/smtp using either outlook express or outlook. User had no problem sending messages.
Now that our users are connecting to Exchage via pop3/smtp they getting the following errors in:
Outlook
Your message did not reach some or all of the intended recipients.
Subject: FW: SHAMROCK - Luster Products - Aerosol - PO Confirmation Request 12 12 07
Sent: 12/12/2007 8:35 AM
The following recipient(s) could not be reached:
'cberry@XXXXXXX.net' on 12/12/2007 8:36 AM
550 5.7.1 Unable to relay
'jeffmangano@XXXXXl.com' on 12/12/2007 8:36 AM
550 5.7.1 Unable to relay
OR
Outllook Express
The message could not be sent because one of the recipients was rejected by the server. The rejected e-mail address was 'ALxxx@xxx.com'. Subject 'Fw: ITK functional report: ERROR (itk23 on LPIAPPS2)', Account: 'Luster Mail', Server: '192.168.43.24', Protocol: SMTP, Server Response: '550 5.7.1 Unable to relay', Port: 25, Secure(SSL): No, Server Error: 550, Error Number: 0x800CCC79
I thought the problem may be that they needed to authenicate to SMTP server was not checked. They are still getting the same error.
Now that our users are connecting to Exchage via pop3/smtp they getting the following errors in:
Outlook
Your message did not reach some or all of the intended recipients.
Subject: FW: SHAMROCK - Luster Products - Aerosol - PO Confirmation Request 12 12 07
Sent: 12/12/2007 8:35 AM
The following recipient(s) could not be reached:
'cberry@XXXXXXX.net' on 12/12/2007 8:36 AM
550 5.7.1 Unable to relay
'jeffmangano@XXXXXl.com' on 12/12/2007 8:36 AM
550 5.7.1 Unable to relay
OR
Outllook Express
The message could not be sent because one of the recipients was rejected by the server. The rejected e-mail address was 'ALxxx@xxx.com'. Subject 'Fw: ITK functional report: ERROR (itk23 on LPIAPPS2)', Account: 'Luster Mail', Server: '192.168.43.24', Protocol: SMTP, Server Response: '550 5.7.1 Unable to relay', Port: 25, Secure(SSL): No, Server Error: 550, Error Number: 0x800CCC79
I thought the problem may be that they needed to authenicate to SMTP server was not checked. They are still getting the same error.
ASKER
I have tried that and I am still getting the same errors.
Thanks for the suggestion and I will try it again. What do you have set for the authenication for pop3?
Jim Z
Thanks for the suggestion and I will try it again. What do you have set for the authenication for pop3?
Jim Z
I'm not sure what you're asking... With Outlook Express, I have the username and password. I did not set Log on using Secure Password Authentication.
Here's the guide I used to set up POP3 - I don't know if there's anything in there that may point you in the right direction or not:
http://msexchangeteam.com/archive/2007/05/16/439093.aspx
Travis
Here's the guide I used to set up POP3 - I don't know if there's anything in there that may point you in the right direction or not:
http://msexchangeteam.com/archive/2007/05/16/439093.aspx
Travis
How do you control relaying through the server?
The most secure method is authentication, but you need to set authentication credentials for SMTP in Outlook Express specifically - not just the PP3 authentication.
Simon.
The most secure method is authentication, but you need to set authentication credentials for SMTP in Outlook Express specifically - not just the PP3 authentication.
Simon.
ASKER
All POP3 user can receive their mail with out a problem. It is when a user attempts to send mail outbound(SMTP) that I get the 550 5.7.1 unable to relay. What setting am I missing on the SMTP connector or what ever in Exchane 07?
Thanks fo rthe help & input
Jimz
Thanks fo rthe help & input
Jimz
It isn't an Exchange issue - but the client. Have you set the client to authenticate when sending?
Simon.
Simon.
ASKER
Yes, the client is set to authenicate!
JImz
JImz
What authentication options have you enabled or changed on the Receive Connectors for the server?
Simon.
Simon.
ASKER
I have a Client connector with the following options checked: Transport Layer Security; Basic Authentication & Offer Basic authentication only after starting TLS; Integrated Windows authentication, Externally Secured.
Default connecter with the following options checked: Transport Layer Security; Basic Authentication & Offer Basic authentication only after starting TLS; Exchange Server Authentication; Integrated Windows authentication.
I needed to create a third because we were getting outside email from our provider; I called it Internert with the following options checked: Transport Layer Security; Basic Authentication & Offer Basic authentication only after starting TLS.
Jimz
Default connecter with the following options checked: Transport Layer Security; Basic Authentication & Offer Basic authentication only after starting TLS; Exchange Server Authentication; Integrated Windows authentication.
I needed to create a third because we were getting outside email from our provider; I called it Internert with the following options checked: Transport Layer Security; Basic Authentication & Offer Basic authentication only after starting TLS.
Jimz
What ports are those listening on?
By default the "Default" is listening on port 25 and the Client is listening on 587 (TLS).
Furthermore with those options enabled, you will only get authenticated relaying if you are using TLS. That needs to be enabled in the client and the client needs to accept the certificate. Are you using home grown or a purchased SSL certificate? If it is a purchased SSL certificate then the name you use for the SMTP server needs to be the same name as on the certificate.
Simon.
By default the "Default" is listening on port 25 and the Client is listening on 587 (TLS).
Furthermore with those options enabled, you will only get authenticated relaying if you are using TLS. That needs to be enabled in the client and the client needs to accept the certificate. Are you using home grown or a purchased SSL certificate? If it is a purchased SSL certificate then the name you use for the SMTP server needs to be the same name as on the certificate.
Simon.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Closed, 500 points refunded.
Vee_Mod
Community Support Moderator
Vee_Mod
Community Support Moderator
Exchange 2007, by default, uses everything secure. This is what I had to do (in Outlook Express):
Tools - Accounts - Properties (of the Exchange 2007 account). Go to the Advanced tab and make sure "This Server requires a secure connection (SSL)" is checked for BOTH POP3 and SMTP.
Hope that helps.
Travis