[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1831
  • Last Modified:

Helo command reject: Access-Denied

Hi guy hope you all can help.

I recently setup my first mail server.
It is working quiet well, except for this error, on some of the mails that goes out.

There was a SMTP communication problem with the recipient's email server. Please contact your system administrator. <mydomain.co.za #5.5.0 smtp;550 Helo command rejected: Access-Denied (mydomain.co.za)>

I have tried chenging it from helo ehlo, and back, but can't fix it.

not sure how to address this issue.

Please could any one help.

Thank be grand

Bibab
0
Bibab
Asked:
Bibab
  • 12
  • 9
1 Solution
 
Glen KnightCommented:
Is it Exchange 207/2010?
If so then you need to check the receive connectors under Server Configuration > Hub transport.

There will be a connector called Default Servername can you screen capture the tabs and post them please?
0
 
Satya PathakLead Technical ConsultantCommented:
0
 
BibabAuthor Commented:
Hi sorry also got another question running.

The exchange is 5.5.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
BibabAuthor Commented:
Where do i find Server config, i only know server management.
Sorry for dumb question, like i said i am new to this all.
0
 
Glen KnightCommented:
Ok 5.5??
In that case it's more than likely because you don't have a rDNS(PTR) record.

Can you check your configuration against my document here: http://www.experts-exchange.com/articles/Software/Server_Software/Email_Servers/Exchange/Exchange-DNS-Configuration.html

if you find the article useful please vote for it :)
0
 
BibabAuthor Commented:
what is rdns(ptr), and how do i get it.
0
 
Glen KnightCommented:
A revers DNS record.
You need to ask your ISP to set one up.

It's all explained in my article.
0
 
BibabAuthor Commented:
0
 
BibabAuthor Commented:
like i said i only have problems with some addresses, not all of them.
0
 
Glen KnightCommented:
So youbalready have a rDNS record?

For the domain you are trying to send mail to can you try telnetting to it onnpoet 25?
0
 
Glen KnightCommented:
Not all will check for rDNS
0
 
BibabAuthor Commented:
telnetting to it onnpoet 25?

what is this and how do i do this
0
 
Glen KnightCommented:
Goto http://www.mxtoolbox.com

enter the domain name of the address your having difficulty with.
This will tell you what the MX record is.

Once you have that from your exchange server open a command prompt and type:

telnet mx_record 25

replace mx_record with the MX record you got from mxtoolbox and press enter
does it allow you to connect?
If so type the following:

ehlo yourdomain.com

replace yourdomain.com with your email domain and press enter.
What do you get?

As a test you could also use http://www.mxtoolbox.com and put your domain name in and run the test
0
 
BibabAuthor Commented:
Here is the outcome
untitled.bmp
0
 
BibabAuthor Commented:
Here is our domain on mx lookup
untitled.JPG
0
 
Glen KnightCommented:
Ok, can you try the same again but this time instead of typing ehlo domainname.com type helo domainname.com

what do you get?
0
 
BibabAuthor Commented:
Here you go
untitled.JPG
0
 
Glen KnightCommented:
I have just run a DNS report and you DEFINATELY do not have a rDNS record
which is more than likely why your mail is being rejected.

See here:

FAIL      Reverse DNS entries for MX records      ERROR: The IP of one or more of your mail server(s) have no reverse DNS (PTR) entries/* (if you see "Timeout" below, it may mean that your DNS servers did not respond fast enough)*/. RFC1912 2.1 says you should have a reverse DNS for all your mail servers. It is strongly urged that you have them, as many mailservers will not accept mail from mailservers with no reverse DNS entry. You can double-check using the 'Reverse DNS Lookup' tool on our site if you recently changed your reverse DNS entry (it contacts your servers in real time; the reverse DNS lookups in the DNS report use our local caching DNS server). The problem MX records are:
10.90.214.196.in-addr.arpa [No reverse DNS entry (rcode: 3 ancount: 0) (check it)]
0
 
BibabAuthor Commented:
is it bad that our domain has blacklist infront of it?
0
 
BibabAuthor Commented:
okay, i understand, how can i sort out this problem, without getting my isp to come out again and F*ck up everything. becuase they said it was setup.
0
 
Glen KnightCommented:
You should just need to give them a call and they can set it up.
0
 
BibabAuthor Commented:
well thanks for all the help, will do that in the morning.
and reply to you if i came write.
also where do i vote for your advice, you have helped me a great deal.
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

  • 12
  • 9
Tackle projects and never again get stuck behind a technical roadblock.
Join Now