Solved

Can't send email to some external domains Exchange 2007

Posted on 2008-11-02
16
3,085 Views
Last Modified: 2012-05-05
I am having issues sending emails to certain domains and other domains are fine.  I am getting these NDRs: #550 4.4.7 QUEUE.Expired; message expired ##.   I am currently running Windows SBS2008 with Exchange 2007 built in.  

Here is an output from get-queue |fl

Identity         : LASBS01\1590
DeliveryType     : DnsConnectorDelivery
NextHopDomain    : fbol.com
NextHopConnector : 12589173-ed78-4864-b6e1-d7426f68f803
Status           : Retry
MessageCount     : 1
LastError        : 451 4.4.0 Primary target IP address responded with: "554 mta
                   06.firstbanks-online.com." Attempted failover to alternate h
                   ost, but that did not succeed. Either there are no alternate
                    hosts, or delivery failed to all alternate hosts.
LastRetryTime    : 11/2/2008 3:54:51 PM
NextRetryTime    : 11/2/2008 4:04:51 PM
IsValid          : True
ObjectState      : Unchanged

Identity         : LASBS01\1969
DeliveryType     : DnsConnectorDelivery
NextHopDomain    : phs.com
NextHopConnector : 12589173-ed78-4864-b6e1-d7426f68f803
Status           : Retry
MessageCount     : 2
LastError        : 451 4.4.0 Primary target IP address responded with: "554 mai
                   l2.corpmailsvcs.com." Attempted failover to alternate host,
                   but that did not succeed. Either there are no alternate host
                   s, or delivery failed to all alternate hosts.
LastRetryTime    : 11/2/2008 3:53:42 PM
NextRetryTime    : 11/2/2008 4:03:46 PM
IsValid          : True
ObjectState      : Unchanged

Here is the output from get-sendconnector |fl
AddressSpaces                : {smtp:*;1}
AuthenticationCredential     :
Comment                      :
ConnectedDomains             : {}
ConnectionInactivityTimeOut  : 00:10:00
DNSRoutingEnabled            : True
DomainSecureEnabled          : False
Enabled                      : True
ForceHELO                    : False
Fqdn                         : mail.mydomain.com
HomeMTA                      : Microsoft MTA
HomeMtaServerId              : LASBS01
Identity                     : Windows SBS Internet Send LASBS01
IgnoreSTARTTLS               : False
IsScopedConnector            : False
IsSmtpConnector              : True
LinkedReceiveConnector       :
MaxMessageSize               : 10MB
Name                         : Windows SBS Internet Send LASBS01
Port                         : 25
ProtocolLoggingLevel         : None
RequireTLS                   : False
SmartHostAuthMechanism       : None
SmartHosts                   : {}
SmartHostsString             :
SourceIPAddress              : 0.0.0.0
SourceRoutingGroup           : Exchange Routing Group (DWBGZMFD01QNBJR)
SourceTransportServers       : {LASBS01}
UseExternalDNSServersEnabled : True
0
Comment
Question by:Undisputed
  • 11
  • 3
  • 2
16 Comments
 
LVL 6

Expert Comment

by:JerrytheGreat
ID: 22864234
A 554 error usually means there is a problem you will need to address.  the first step is to determine what the response from the other mail server is.

The easiest way to do this is by opening a command prompt on your mail server to simulate an email connection.
1. perform the dns lookup for the other domain (probably not necessary here, but I would still do it to be thorough)
nslookup [enter]
set q=mx[enter]
recipientdomain.com[enter]
this will give you the mail server of the other domain.
exit[enter]
Now simulate a SMTP connection to see what the other server says.
telnet [mailservername] 25[enter]
helo [yourservername]
mail from:[youremail address][enter]
rcpt to:[recipientemailaddress][enter]
data[enter]
subject:test[enter]
This is atest message, please reply if you receive this[enter]
[enter]
.
[enter]
If you get a message queued for delivery, it all looks good, otherwise you will hopefully get some kind of error you can read in plain english which will give you good informatio on what to do next to resolve the issue.

good luck!
0
 
LVL 4

Expert Comment

by:pistolslapper
ID: 22864417
Looks to me like you have DNS problems. If you are sending mail directly from your SBS server you will need to masqerade your registered FQDN inside your exchange config. You will also need to make sure you have correctly setup a reverse DNS record for your domain. This is important because some mails server's filters perform reverse lookups on incoming mail and if the lookup fails the mail is dropped.

You may also be running into some mail servers that use greylisting. Greylisting is when a mailserver recieves a message from a domain it doesnt know and doesnt accept the mail. To get on the list of accepted domains you need to retry the send within 300 seconds (this is the figure i've seen a few times) then it will acept the mail and add you to the known list.

A couple of  good sites for testing your mail setup and dns are - http://www.mxtoolbox.com/ and http://www.checkdns.net

They will let you know if there are any issues and possible resolutions.


0
 
LVL 3

Author Comment

by:Undisputed
ID: 22864936
Ok I'm not sure what happened but my problems may have been fixed.  I will keep this open just in case.  However, I didn't do anything really except create a srv record at my dns provider with my autodiscovery url.  I doubt this is what fixed the issue but my emails are no longer in queue.  I also sent more test emails to those servers and nothing got stuck in queue.
0
 
LVL 3

Author Comment

by:Undisputed
ID: 22880462
Ok I guess it's not fixed.  I am getting the following:

Identity         : LASBS01\2967
DeliveryType     : DnsConnectorDelivery
NextHopDomain    : messaging.sprintpcs.com
NextHopConnector : 12589173-ed78-4864-b6e1-d7426f68f803
Status           : Retry
MessageCount     : 2
LastError        : 451 4.4.0 Primary target IP address responded with: "554 lxn
                   ipc6003.nmcc.sprintspectrum.com." Attempted failover to alte
                   rnate host, but that did not succeed. Either there are no al
                   ternate hosts, or delivery failed to all alternate hosts.
LastRetryTime    : 11/4/2008 12:33:53 PM
NextRetryTime    : 11/4/2008 12:43:54 PM
IsValid          : True
ObjectState      : Unchanged

Identity         : LASBS01\3503
DeliveryType     : DnsConnectorDelivery
NextHopDomain    : silkybottom.com
NextHopConnector : 12589173-ed78-4864-b6e1-d7426f68f803
Status           : Retry
MessageCount     : 1
LastError        : 451 4.4.0 Primary target IP address responded with: "421 4.2
                   .1 Unable to connect." Attempted failover to alternate host,
                    but that did not succeed. Either there are no alternate hos
                   ts, or delivery failed to all alternate hosts.
LastRetryTime    : 11/4/2008 12:33:51 PM
NextRetryTime    : 11/4/2008 12:44:12 PM
IsValid          : True
ObjectState      : Unchanged

Identity         : LASBS01\3509
DeliveryType     : MapiDelivery
NextHopDomain    : mail.mydomain.com
NextHopConnector : 00000000-0000-0000-0000-000000000000
Status           : Ready
MessageCount     : 0
LastError        :
LastRetryTime    : 11/4/2008 12:36:25 PM
NextRetryTime    :
IsValid          : True
ObjectState      : Unchanged

Identity         : LASBS01\3563
DeliveryType     : DnsConnectorDelivery
NextHopDomain    : yahoo.com
NextHopConnector : 12589173-ed78-4864-b6e1-d7426f68f803
Status           : Ready
MessageCount     : 0
LastError        :
LastRetryTime    : 11/4/2008 12:35:47 PM
NextRetryTime    :
IsValid          : True
ObjectState      : Unchanged

Identity         : LASBS01\3566
DeliveryType     : DnsConnectorDelivery
NextHopDomain    : mgm.com
NextHopConnector : 12589173-ed78-4864-b6e1-d7426f68f803
Status           : Ready
MessageCount     : 0
LastError        :
LastRetryTime    : 11/4/2008 12:37:05 PM
NextRetryTime    :
IsValid          : True
ObjectState      : Unchanged

Identity         : LASBS01\3567
DeliveryType     : DnsConnectorDelivery
NextHopDomain    : cirquedusoleil.com
NextHopConnector : 12589173-ed78-4864-b6e1-d7426f68f803
Status           : Ready
MessageCount     : 0
LastError        :
LastRetryTime    : 11/4/2008 12:37:28 PM
NextRetryTime    :
IsValid          : True
ObjectState      : Unchanged

Identity         : LASBS01\Submission
DeliveryType     : Undefined
NextHopDomain    : Submission
NextHopConnector : 00000000-0000-0000-0000-000000000000
Status           : Ready
MessageCount     : 0
LastError        :
LastRetryTime    :
NextRetryTime    :
IsValid          : True
ObjectState      : Unchanged
0
 
LVL 4

Expert Comment

by:pistolslapper
ID: 22882427
have you checked to see if your mailserver is blacklisted? check out www.mxtoolbox.com
- you will find a place where u can test your mail server.

0
 
LVL 3

Author Comment

by:Undisputed
ID: 22883274
definitely not blacklisted.  reverse dns is configured correctly also.

Any other ideas?
0
 
LVL 3

Author Comment

by:Undisputed
ID: 22883307
I notice when this stuff happens, I try to telnet into their mail server and the connection just drops right away.
0
 
LVL 3

Author Comment

by:Undisputed
ID: 22883317
also, when i launch nslookup by right clicking on my sbs 2008 server name it shows a default server and IP.  However, if I try to run nslookup from just a command prompt it shows an unknown default server and what looks like a tcp/ip v6 address.
0
Free book by J.Peter Bruzzese, Microsoft MVP

Are you using Office 365? Trying to set up email signatures but you’re struggling with transport rules and connectors? Let renowned Microsoft MVP J.Peter Bruzzese show you how in this exclusive e-book on Office 365 email signatures. Better yet, it’s free!

 
LVL 3

Author Comment

by:Undisputed
ID: 22883461
fixed the v 6 issue so nslookup works properly now.  However, even when I try to telnet (from different ext IP addresses) to the domains that i'm having issues with, I keep getting error 554.
0
 
LVL 6

Expert Comment

by:JerrytheGreat
ID: 22892020
The most important part of that error 554 is the text that almost always accompanies it when you do the telnet test--What is the actual response? It is usually self-explanatory, and ofent even gives instructions on how to fix it.
0
 
LVL 3

Author Comment

by:Undisputed
ID: 22896766
when i do the telnet test this is what i get:
     554 mail03.viacom.com
     Connection to host lost.

I get that response right when I type telnet mail1.viacom.com 25

When I ping mail1.viacom.com i get the correct ip: 166.77.11.50 but when I ping mail03.viacom.com I get 166.77.11.7
0
 
LVL 3

Author Comment

by:Undisputed
ID: 22897709
I've done all dns tests and EVERYTHING is pointing to the fact that my setup is correct.  I'm just lost now.
0
 
LVL 3

Author Comment

by:Undisputed
ID: 22910406
Ok i am not sure if this means anything but for some reason, whether inside my office network or on another network I cannot do the telnet test to mail1.viacom.com or any of the other domains I have issues with like fbol.com or phs.com.

People who are on xp pro or linux boxes can do the telnet test fine but vista and sbs 2008 boxes (w/exchange 2007) cannot.  Is there some command differences that are causing these immediate disconnect failures?  This may have some bearing on why I cannot send emails to those domains properly.

Can someone try and verify that they can or can't also?
0
 
LVL 6

Expert Comment

by:JerrytheGreat
ID: 22910427
Are you doing an mx lookup for thos domains so you connect to the correct server name?

centralops.net has an easy MX lookup gui.
0
 
LVL 3

Author Comment

by:Undisputed
ID: 22910529
yes of course
0
 
LVL 3

Accepted Solution

by:
Undisputed earned 0 total points
ID: 23176221
It was an issue on the other domain addresses I sent to.  They had to add me to their whitelists.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Resolve DNS query failed errors for Exchange
Resolve Outlook connectivity issues after moving mailbox to new Exchange 2016 server
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now