Solved

Mail Flow Issue - 503 5.5.1 Error: send HELO/EHLO first

Posted on 2010-08-26
14
3,799 Views
Last Modified: 2012-08-13
Our users are receiving 550 4.4.7 QUEUE.Expired undeliverable messages only to a single domain.

Using the Troubleshooting Assistant, the following Mail Flow issue is found:
Remote server mail.domain.com failed the mail acceptance test. MAIL FROM command: Respond = 503 5.5.1 Error: send HELO/EHLO first.

We confirmed all of the messages sent to this domain are stuck in the queue.  No configuration changes have been made on the local Exchange server or on the remote mail server, which happens to be Postfix.
0
Comment
Question by:gatorIT
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 8
  • 6
14 Comments
 
LVL 13

Expert Comment

by:George Sas
ID: 33537274
Well , I am sure someone PATCHED the Postfix on the other end.
Try to talk with them and have them check the system and what the patch did.

Had this issue a few years ago with an internal Postfix (I am not a postfix man) and the guy responsible for the system patched postfix and then the error started.

Check on your exchange if you have enabled TSL on the smtp send connector and try disabling that first.
0
 
LVL 13

Expert Comment

by:George Sas
ID: 33537291
Btw , try to send a mail to that system using telnet and see if you are able to send it that way.
0
 

Author Comment

by:gatorIT
ID: 33537372
TLS is not enabled on the send connector and I have tried sending via telnet which was successful.
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 13

Expert Comment

by:George Sas
ID: 33537385
What exchange version are you running ?
0
 

Author Comment

by:gatorIT
ID: 33537394
2007
0
 
LVL 13

Expert Comment

by:George Sas
ID: 33537398
And , are you using an FQDN on the send connector ? something that can be solved from outside also ?
0
 

Author Comment

by:gatorIT
ID: 33537405
Interestingly enough I am trying to send from another Exchange 2007 mail server (completely separate and unrelated) and the mail is queued there as well.  
0
 

Author Comment

by:gatorIT
ID: 33537429
Yes, I verified in the smtpsend logs that it's sending the FQDN.  The EHLO is being sent as well, so not sure why Postfix isn't seeing it that way.
0
 
LVL 13

Accepted Solution

by:
George Sas earned 250 total points
ID: 33537477
I still believe this is a Postfix issue and authentication between the 2 systems.
One of the systems , your or the postfix is asking for authentication.
0
 
LVL 13

Expert Comment

by:George Sas
ID: 33537521
Are you using any gateway to send the mails out or do they go out DIRECTLY from your exchange ?
0
 

Author Comment

by:gatorIT
ID: 33537554
Like a smart host?  No, just DNS.  We have a smarthost available that I was going to try.
0
 
LVL 13

Expert Comment

by:George Sas
ID: 33537585
I would contact the admin on the other side asap and ask him to look trough his logs and see what the problem is and what message does he see coming from your end when you try to submit mail.
0
 

Author Comment

by:gatorIT
ID: 33557415
Due to time constraints we implemented a smart host for this domain that resolved the issue.  Mentioned to the remote mail server admin that they might research further on their end.  
0
 
LVL 13

Expert Comment

by:George Sas
ID: 33557522
I think you did all you could on your end ... but still 100% sure the error is on the receiver side
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains how to install and use the NTBackup utility that comes with Windows Server.
This article will help to fix the below error for MS Exchange server 2010 I. Out Of office not working II. Certificate error "name on the security certificate is invalid or does not match the name of the site" III. Make Internal URLs and External…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
how to add IIS SMTP to handle application/Scanner relays into office 365.

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question