w2k3 SMTP email problem: 550 Access denied - Invalid HELO name

Posted on 2009-02-16
Last Modified: 2013-11-30
Can someone please walk me through this configuration problem? We have a w2k3 server in a data center that is sending out automated emails (from the same address as our corporate Exchange 2003 Server). For the most part, we aren't having any issues except for some recipients are bouncing the emails back with a "550 Access denied - Invalid HELO name" error.

I just don't know the proper configuration settings on the virtual SMTP to prevent this from happening. I assume this is what prevents email spoofing, so there is likely something I need to set (and perhaps grant permission on from our Exchange Server?)

Help.. I am lost.

Question by:dbrennecke
    LVL 65

    Expert Comment

    In SMTP Config in IIS manager, right click on the Default SMTP VS and choose Properties. Click on the tab Delivery, then Advanced. In the FQDN change the name to match your reverse DNS and IP address entry. That should not be the same as your Exchange server, it should have its own DNS information.


    Author Comment

    I get the jist of what needs to be done.. but for clarifty...

    Exchange IP: which resoves to
    ""  with a
    Top-level Domain of ""

    Data Center IP: which resolves to
    "" with a
    Top Level Domain of ""

    The Advnaced Delivery setting is:
    FQDN: MyMachineName

    So I need a bit more help getting this right (sorry to be such a newbie)!

    LVL 65

    Accepted Solution

    Forget about what your Exchange server has, that is irrelevant.

    The server in the data centre needs a valid host name pointing to it.

    So that could be
    Then you need to set in the reverse DNS records (aka PTR records) on that server external IP address. You may have a control panel to do that, the company that is providing the connectivity in the data centre may have to do it for you.

    Then you set the FQDN to - changing it from servername. It is the servername that is causing the initial error, and lack of DNS and reverse DNS will also be causing you email delivery issues. So I am actually covering more than you need.


    Author Comment

    Makes sense... I will get with the data center and see what they can assist with. Thanks for the thorough response.

    Featured Post

    Want to promote your upcoming event?

    Are you going to an event? Are you going to be exhibiting at a tradeshow? Talking at a conference? Using a promotional banner in your email signature ensures that your organization’s most important contacts stay in the know and can potentially spread the word about the event.

    Join & Write a Comment

    Suggested Solutions

    ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
    Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
    In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
    In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now