Solved

Unable to Relay - sending through smtp from IIS app

Posted on 2010-11-09
7
1,475 Views
Last Modified: 2012-05-10
Our development group uses jira website and they have setup the smtp to our exchange server. It is able to send emails internally, but when they try to send to an external email address they get the following info in the log...

An error has occurred with sending the test email:
com.atlassian.mail.MailException: javax.mail.SendFailedException: Invalid Addresses;
  nested exception is:
      com.sun.mail.smtp.SMTPAddressFailedException: 550 5.7.1 Unable to relay

I have tried adding the server IP address to the connector, but it doesn't send out to an external email address. This stopped working once we found out we were an open relay with our default connector and turned that off.

We are using Exchange 2007
0
Comment
Question by:paulkatz
7 Comments
 
LVL 3

Expert Comment

by:stanley_stars
Comment Utility
Check your receive connectors Authentication and Permissions tab. I believe that for the authentication you can use Externally Secured only and for Permissions make sure Anonymous Users is selected at a minimum.
0
 
LVL 8

Expert Comment

by:GundogTrainer
Comment Utility
can you prove you can connect to the server from command line from the server with the code running.
Also if its on the same server you may need to ad 127.0.0.1 as well as the actual IP.

(replace the server name below)
telnet <smtp server name here> 25
0
 
LVL 20

Expert Comment

by:EndureKona
Comment Utility
I would create a new receive connector called JRE Relay or something like that and follow the article:

http://msexchangeteam.com/archive/2006/12/28/432013.aspx

You will have to select anonymous for the connector if not authenticating and run shell command:  Get-ReceiveConnector "JRE Relay" | Add-ADPermission -User "NT AUTHORITY\ANONYMOUS LOGON" -ExtendedRights "ms-Exch-SMTP-Accept-Any-Recipient"
0
Why do Marketing keep bothering you?

Is your marketing department constantly asking for new email signature updates? Are they requesting a different design for every department? Do they need yet another banner added? Don’t let it get you down! There is an easy way to manage all of these requests...

 

Author Comment

by:paulkatz
Comment Utility
I set a receive connector to accept from only that server IP, set the authentication to externally secured and permissions to anonymous and exchange servers (which is needed), but still cannot relay.

The jira mail server configuration does ask for a "from address"; does this have to be a mailbox within our server (they set it up as jira-noreply@<ourdomain>.com)
0
 
LVL 20

Expert Comment

by:EndureKona
Comment Utility
Externally secured is not correct unless your using IPsec or something along these lines.   This is all internal correct?   Typically I leave the defaults like TLS, Basic Auth, Basic Auth only after TLS, Exchange Server auth, and intergrated auth....

you ran the shell command?

Get-ReceiveConnector "JRE Relay" | Add-ADPermission -User "NT AUTHORITY\ANONYMOUS LOGON" -ExtendedRights "ms-Exch-SMTP-Accept-Any-Recipient"
0
 

Author Comment

by:paulkatz
Comment Utility
I followed the steps from the microsoft kb article and created a new receive connector, yet I still get the same error; what am I missing?
0
 
LVL 20

Accepted Solution

by:
EndureKona earned 500 total points
Comment Utility
I recommend follow this artice:  http://msexchangeteam.com/archive/2006/12/28/432013.aspx   This works everytime...

Question is the sending server that is hosting the website a VM?    I have seen denied because it sees the host IP
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Marketers need statistics and metrics like everybody else needs oxygen. In this article we explain how to enable marketing campaign statistics for Microsoft Exchange mail.
This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now