Postini #550 5.7.1 Sender ID (PRA) Not Permitted ##

Hello,

We are using Exch2007 with outbound and inbound mail flowing through Postini Services.  I have recently setup an SPF record for our domain, and have setup IP Lock through Postini adding just our server's IP block that are allowed to send mail from our domain as suggested by the folks over at Postini.

One of my international users is trying to send an email to someone and getting the following error back to exchange / Postini.

Is this somthing with their email server?



Diagnostic information for administrators:
Generating server: exch2k7.OURSERVER.local
destination.user@theirdomain.edu.pk
Postini #550 5.7.1 Sender ID (PRA) Not Permitted ##
destination.user@theirdoamin.edu.pk
Postini #550 5.7.1 Sender ID (PRA) Not Permitted ##
Original message headers:
Received: from exch2k7.OURSERVER.local ([192.168.0.50]) by exch2k7.OURSERVER.local
 ([192.168.0.50]) with mapi; Wed, 13 Oct 2010 21:48:58 -0400
From: Our User <ouruser@ourdomain.edu>
To: destination user <destination.user@theirdomain.edu.pk>
Date: Wed, 13 Oct 2010 21:48:56 -0400
Subject: RE: Our meeting
Thread-Topic: Our meeting
Thread-Index: AQHLJLrBJ7w3F5ODTkmAzk3JJfuC8pKzMtFggAADO9eAi6Cq0IABY3mQ
Message-ID: <5E5E1BB0CF5C4A4D89B8B72A91AB31D41E7FCE9998@exch2k7.ourdomain.local>
References: <027EE25B4B26FA488F68E78DE34481910160D142A8CB@E2K7EMC.lums.net>,<5E5E1BB0CF5C4A4D89B8B72A91AB31D41E35AA43C6@exch2k7.ourdomain.local>
 <027EE25B4B26FA488F68E78DE34481910160D142A8D0@E2K7EMC.lums.net>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: multipart/alternative;
        boundary="_000_5E5E1BB0CF5C4A4D89B8B72A91AB31D41E7FCE9998exch2k7l_"
MIME-Version: 1.0
TPRaysAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

techguy615Commented:
It looks like a problem with postini. It is saying your server isn't authorized. Do you have postini setup to look at the external IP range for your servers?
TPRaysAuthor Commented:
Techguy615:  This is the only message I have received with this error, everyone else has been able to send messages without any issues for as long as I can remember.
I am a little sketcky on what your you mean by your question.  We have outbound email smart connector on exchange routing mail to postini's outbounds6.obsmtp.com.  On the incomming we have postini servers listed in our MX record as needed.  Although, this issue only has to do with outbound email.

I have read that there could be an issue with the receiving mail server's  Your Sender ID I was leaning the way that its possible their mailserver has incorrect info in an SPF record?
techguy615Commented:
Ok, so this is an issue with a single user sending outbound messages then and not a global problem?
HTML5 and CSS3 Fundamentals

Build a website from the ground up by first learning the fundamentals of HTML5 and CSS3, the two popular programming languages used to present content online. HTML deals with fonts, colors, graphics, and hyperlinks, while CSS describes how HTML elements are to be displayed.

techguy615Commented:
Ok, I see that now. Must have been a brain fart. Interesting issue. I am sure that I have encountered this one before.
techguy615Commented:
See is this helps some:

http://www.google.com/support/forum/p/AppSecurity/thread?tid=5f9e14aace7d95ac&hl=en

That is strange for one user. It would normally be an all or nothing thing. We had this happen one time, but for the life of me can't remember the fix.

Anyone else have any ideas?

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
R--RCommented:
Check if the ip is blacklisted of the sender.
TPRaysAuthor Commented:
techguy615:

While reading the link you gave me I think I know what happened.  I was in the midst of updating OUR SFP record and I did not include ALL Postini IP's (the way we send out email), I did later find the mistake and correct it, but I had the user try to send mail again to this person before the changes propogated (most likely).  The receiver's MTA must have had SENDER ID in place, and when it tried to check my SPF record in DNS it said, Nope your not authorized as a sender for my domain.

So in a nutshell it was Sender ID and SPF working as designed :)

I re-sent a message to this recepient today and it went through just fine.

Thanks for all the help!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Email Protocols

From novice to tech pro — start learning today.