Helo command reject: Access-Denied

Hi guy hope you all can help.

I recently setup my first mail server.
It is working quiet well, except for this error, on some of the mails that goes out.

There was a SMTP communication problem with the recipient's email server. Please contact your system administrator. <mydomain.co.za #5.5.0 smtp;550 Helo command rejected: Access-Denied (mydomain.co.za)>

I have tried chenging it from helo ehlo, and back, but can't fix it.

not sure how to address this issue.

Please could any one help.

Thank be grand

Bibab
BibabAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Glen KnightCommented:
Is it Exchange 207/2010?
If so then you need to check the receive connectors under Server Configuration > Hub transport.

There will be a connector called Default Servername can you screen capture the tabs and post them please?
0
Satya PathakLead Technical ConsultantCommented:
0
BibabAuthor Commented:
Hi sorry also got another question running.

The exchange is 5.5.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

BibabAuthor Commented:
Where do i find Server config, i only know server management.
Sorry for dumb question, like i said i am new to this all.
0
Glen KnightCommented:
Ok 5.5??
In that case it's more than likely because you don't have a rDNS(PTR) record.

Can you check your configuration against my document here: http://www.experts-exchange.com/articles/Software/Server_Software/Email_Servers/Exchange/Exchange-DNS-Configuration.html

if you find the article useful please vote for it :)
0
BibabAuthor Commented:
what is rdns(ptr), and how do i get it.
0
Glen KnightCommented:
A revers DNS record.
You need to ask your ISP to set one up.

It's all explained in my article.
0
BibabAuthor Commented:
0
BibabAuthor Commented:
like i said i only have problems with some addresses, not all of them.
0
Glen KnightCommented:
So youbalready have a rDNS record?

For the domain you are trying to send mail to can you try telnetting to it onnpoet 25?
0
Glen KnightCommented:
Not all will check for rDNS
0
BibabAuthor Commented:
telnetting to it onnpoet 25?

what is this and how do i do this
0
Glen KnightCommented:
Goto http://www.mxtoolbox.com

enter the domain name of the address your having difficulty with.
This will tell you what the MX record is.

Once you have that from your exchange server open a command prompt and type:

telnet mx_record 25

replace mx_record with the MX record you got from mxtoolbox and press enter
does it allow you to connect?
If so type the following:

ehlo yourdomain.com

replace yourdomain.com with your email domain and press enter.
What do you get?

As a test you could also use http://www.mxtoolbox.com and put your domain name in and run the test
0
BibabAuthor Commented:
Here is the outcome
untitled.bmp
0
BibabAuthor Commented:
Here is our domain on mx lookup
untitled.JPG
0
Glen KnightCommented:
Ok, can you try the same again but this time instead of typing ehlo domainname.com type helo domainname.com

what do you get?
0
BibabAuthor Commented:
Here you go
untitled.JPG
0
Glen KnightCommented:
I have just run a DNS report and you DEFINATELY do not have a rDNS record
which is more than likely why your mail is being rejected.

See here:

FAIL      Reverse DNS entries for MX records      ERROR: The IP of one or more of your mail server(s) have no reverse DNS (PTR) entries/* (if you see "Timeout" below, it may mean that your DNS servers did not respond fast enough)*/. RFC1912 2.1 says you should have a reverse DNS for all your mail servers. It is strongly urged that you have them, as many mailservers will not accept mail from mailservers with no reverse DNS entry. You can double-check using the 'Reverse DNS Lookup' tool on our site if you recently changed your reverse DNS entry (it contacts your servers in real time; the reverse DNS lookups in the DNS report use our local caching DNS server). The problem MX records are:
10.90.214.196.in-addr.arpa [No reverse DNS entry (rcode: 3 ancount: 0) (check it)]
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
BibabAuthor Commented:
is it bad that our domain has blacklist infront of it?
0
BibabAuthor Commented:
okay, i understand, how can i sort out this problem, without getting my isp to come out again and F*ck up everything. becuase they said it was setup.
0
Glen KnightCommented:
You should just need to give them a call and they can set it up.
0
BibabAuthor Commented:
well thanks for all the help, will do that in the morning.
and reply to you if i came write.
also where do i vote for your advice, you have helped me a great deal.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Email Servers

From novice to tech pro — start learning today.