550 Unable To Relay when webserver tries to send external email

Posted on 2009-04-13
Medium Priority
Last Modified: 2013-11-30
I have a web server that is located behind the DMZ interface of our firewall.  The website allows customers to send emails of collections lists.  I have allowed the web server smtp access to the exchange server in our internal network.  On the firewall audits I can see that the traffic is passing the firewall.  The web server will send the email to internal email addresses, but when it tries to send to external email addresses, the exchange server returns a 550 unable to relay error message.  I followed these directions from Microsoft (http://technet.microsoft.com/en-us/library/bb232021.aspx), but the server still will not email external users.  Any suggestions or assistance would be greatly appreciated.  
Question by:beefwilliams
  • 3
  • 2

Accepted Solution

AClockworkTech earned 1500 total points
ID: 24132797
I believe you have to add the Firewall's LAN interface to the allowed relay list in Exchange for this to work, depending on how your firewall is handling Masquerading from the DMZ network into your LAN.  Alternatively, you can use SMTP authentication.

Author Comment

ID: 24137804
Thanks for the suggestion.  I added the firewall interface to the allow relay list in Exchange.  However, that change did not resolve the issue.  The program on the web server that handles the emailing will not allow me to enter in any type of user name so I don't know if authentication of any type will work.  

Author Comment

ID: 24138659
I j ust noticed that the email address is not linked to an active directory user account.  Would that cause this problem?

Expert Comment

ID: 24139339
No, it should be fine.  Did you make sure to run the following code from the Exchange Management Shell?  Also make sure "Anonymous Users" is checked in the "Permissions" tab on the receive connector properties in the Console.
Get-ReceiveConnector "ServerName\Receive Connector Name" | Add-ADPermission -User "NT AUTHORITY\ANONYMOUS LOGON" -ExtendedRights "Ms-Exch-SMTP-Accept-Any-Recipient" 

Open in new window


Author Comment

ID: 24139521
After looking in the SmtpReceive logs, I noticed that instead of the DMZ firewall interface IP address, it had the firewall internal IP address listed.  Once I added the firewall internal ip as a receive connector, the external emailing problem was fixed.  Thanks again for your help!

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Exchange database can often fail to mount thereby halting the work of all users connected to it. Finding out why database isn’t mounting is crucial and getting the server back online. Stellar Phoenix Mailbox Exchange Recovery is a champion product t…
In this post, we will learn to set up the Group Naming policy and will see how it is going to impact the Display Name and the Email addresses of the Group.
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
Watch the video to know how one can repair corrupt Exchange OST file effortlessly and convert OST emails to MS Outlook PST file format by using Kernel for OST to PST converter tool. It can convert OST to MSG, MBOX, EML to access them. It can migrate…

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question