Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Unable to Relay - sending through smtp from IIS app

Posted on 2010-11-09
7
Medium Priority
?
1,552 Views
Last Modified: 2016-12-08
Our development group uses jira website and they have setup the smtp to our exchange server. It is able to send emails internally, but when they try to send to an external email address they get the following info in the log...

An error has occurred with sending the test email:
com.atlassian.mail.MailException: javax.mail.SendFailedException: Invalid Addresses;
  nested exception is:
      com.sun.mail.smtp.SMTPAddressFailedException: 550 5.7.1 Unable to relay

I have tried adding the server IP address to the connector, but it doesn't send out to an external email address. This stopped working once we found out we were an open relay with our default connector and turned that off.

We are using Exchange 2007
0
Comment
Question by:paulkatz
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 3

Expert Comment

by:stanley_stars
ID: 34093674
Check your receive connectors Authentication and Permissions tab. I believe that for the authentication you can use Externally Secured only and for Permissions make sure Anonymous Users is selected at a minimum.
0
 
LVL 8

Expert Comment

by:GundogTrainer
ID: 34093693
can you prove you can connect to the server from command line from the server with the code running.
Also if its on the same server you may need to ad 127.0.0.1 as well as the actual IP.

(replace the server name below)
telnet <smtp server name here> 25
0
 
LVL 20

Expert Comment

by:Rick Fee
ID: 34093803
I would create a new receive connector called JRE Relay or something like that and follow the article:

http://msexchangeteam.com/archive/2006/12/28/432013.aspx

You will have to select anonymous for the connector if not authenticating and run shell command:  Get-ReceiveConnector "JRE Relay" | Add-ADPermission -User "NT AUTHORITY\ANONYMOUS LOGON" -ExtendedRights "ms-Exch-SMTP-Accept-Any-Recipient"
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 

Author Comment

by:paulkatz
ID: 34093861
I set a receive connector to accept from only that server IP, set the authentication to externally secured and permissions to anonymous and exchange servers (which is needed), but still cannot relay.

The jira mail server configuration does ask for a "from address"; does this have to be a mailbox within our server (they set it up as jira-noreply@<ourdomain>.com)
0
 
LVL 20

Expert Comment

by:Rick Fee
ID: 34093913
Externally secured is not correct unless your using IPsec or something along these lines.   This is all internal correct?   Typically I leave the defaults like TLS, Basic Auth, Basic Auth only after TLS, Exchange Server auth, and intergrated auth....

you ran the shell command?

Get-ReceiveConnector "JRE Relay" | Add-ADPermission -User "NT AUTHORITY\ANONYMOUS LOGON" -ExtendedRights "ms-Exch-SMTP-Accept-Any-Recipient"
0
 

Author Comment

by:paulkatz
ID: 34093969
I followed the steps from the microsoft kb article and created a new receive connector, yet I still get the same error; what am I missing?
0
 
LVL 20

Accepted Solution

by:
Rick Fee earned 2000 total points
ID: 34094154
I recommend follow this artice:  http://msexchangeteam.com/archive/2006/12/28/432013.aspx   This works everytime...

Question is the sending server that is hosting the website a VM?    I have seen denied because it sees the host IP
0

Featured Post

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will help to fix the below error for MS Exchange server 2010 I. Out Of office not working II. Certificate error "name on the security certificate is invalid or does not match the name of the site" III. Make Internal URLs and External…
Want to know how to use Exchange Server Eseutil command? Go through this article as it gives you the know-how.
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question