We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you two Citrix podcasts. Learn about 2020 trends and get answers to your biggest Citrix questions!Listen Now

x

550 5.7.1 error with trusted domain

florimit
florimit asked
on
Medium Priority
399 Views
Last Modified: 2012-06-21
I have two branch office VPN connections, one to Atlanta and one to Italy. We are all on Windows Platforms as well as hosting our own Exchange Servers. I have setup a domain trust with Atlnta and all is fine. Secondary zones in each DNS server, two-way trust .... can send AND recieve mail no problem. My connection to Italy is identical, BUT if I add a zone for their domain in my DNS, I can no longer send mail to them.
You do not have permission to send to this recipient. For assistance, contact your system administrator.
  <#masking for security reasons#com #5.7.1 smtp;550 5.7.1 Unable to relay for #email_address#
They are able to add a zone in their DNS for my domain and send mail no problem. Our configurations are identical in DNS and Exchange. What else am I missing?

Just to be clear ... I can send and recieve to Italy no problem if I remove the DNS zone from my server.
Comment
Watch Question

CERTIFIED EXPERT

Commented:
Hello
1 how many exchange servers/organisations?


DaN

Author

Commented:
Each location is its own domain. We each only have one Exchange Server, one org, one domain ... etc
CERTIFIED EXPERT

Commented:
and then for Italy the internal FQDN for domain has the same name as the external name?

Author

Commented:
yes ... everything for Italy is just as Atlanta. Atlanta works though and Italy does not.
CERTIFIED EXPERT

Commented:
dou you have an MX record for Italy and an A record with the same name?

Author

Commented:
yes
CERTIFIED EXPERT

Commented:
then look if your Exchnage server in Italy is listening on all interfaces.

Dan

Author

Commented:
how would that affect my situation? Whether or not I have their information in my DNS, the mail exchange is SMTP. There is only one NIC in each of these servers and there is only one Virtual SMTP server setup on each Exchange box.
Jian An LimSolutions Architect
CERTIFIED EXPERT
Top Expert 2016

Commented:
"My connection to Italy is identical, BUT if I add a zone for their domain in my DNS, I can no longer send mail to them. "

after you add your dns server, can you also do the following?

goto system manager/servers/<servername>/protocols/smtp
right click on default smtp virtual server and click properties

goto delivery tab
click advanced then click configure

can you put in 2 external dns servers (which your dns use) and see whether it works?
you might need to restart your smtp services to try it out

Author

Commented:
do you mean external dns as in Itay's DNS or my ISP's DNS ? Italy can send me mail no problem after adding my zone to their DNS and they have no external DNS configured in Exchange. I guess the most confusing part of this is that all three systems (my location , Atlanta and Iatly) are setup the same and I have no problems with Atlanta. It does not make sense ... I will give your suggestion a try and let you know. Thanks!

Sorry ... it's been one heck of a day.
Solutions Architect
CERTIFIED EXPERT
Top Expert 2016
Commented:
put in your ISP dns

because i want to force it to check the email

another thinf you can do is to do a message tracking to see where it response to you to stop relaying.

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts

Author

Commented:
In the message tracking, it shows it stopping on my side.

SMTP : Routed and Queued for Remote Delivery
SMTP : Started outbound transfer of message
SMTP : Non-Delivered Report Generated (NDR)
Jian An LimSolutions Architect
CERTIFIED EXPERT
Top Expert 2016

Commented:
have you try my method?
i think the mx record was not right and it send internally instead of externally ..

Author

Commented:
Bang on ... I cannot believe I let this boggle my brain! Thank you!
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.