?
Solved

421.4.2.1 - Unable to Connect Error

Posted on 2011-04-22
9
Medium Priority
?
6,602 Views
Last Modified: 2012-05-11
Hello, we have a client running exchange 2007 on an SBS 2008 server. This morning they changed ISP's. We have configured our firewall to use the new IP, netowork information. We are able to receive email, access OWA externally, access VPN and browse the internet fine. However, when we attempt to send mail, the mail queues up with the following error:

451.4.4.0 Primary target IP address responded with "421.4.2.1. Unable to connect." Attempted failover to alternate host, but that did not succeed. Either there are no alternate hosts or delivery failed to all alternate hosts."

We've already checked with the ISP and they tell us that there are no firewalls on their new modem. We've also verified our firewall - although the outgoing poilcy for email is still there and doesn't need to be changed. Also the MX records are correct and we don't have an SPF record. What could be causing this?
0
Comment
Question by:StarfishTech
8 Comments
 

Author Comment

by:StarfishTech
ID: 35449232
OK, it seems like we are able to deliver email to some domains but not others.
0
 
LVL 11

Expert Comment

by:Renato Montenegro Rustici
ID: 35450368
Can you configure a SPF record? Also, make sure you have the correct reverse name for the outgoing IP.
0
 

Author Comment

by:StarfishTech
ID: 35450419
OK, in other words make sure there is a reverse PTR record? We created one but we aren't sure if it has completely replicated. Would an spf record fix the issue even if the PTR record isn't replicated?
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
LVL 11

Expert Comment

by:Renato Montenegro Rustici
ID: 35450511
No, but many email servers/gatways check for both configurations. It`s important to keep them updated.

There`s no way to speed up the DNS replication. Once started, you should wait.
0
 

Author Comment

by:StarfishTech
ID: 35451723
OK, well I've done a look on the IP and the domain and it looks like it resolves correctly now. However, we still aren't able to send to lots of domains. I already checked the IP for blacklists - nothing there. I also looked at the header from one domain that we can send to - it seems to look correct. I'm really at a loss as to what is going on here. I guess I will give it more time but I really don't think the PTR record is the problem at this point.
0
 

Expert Comment

by:Amiruk
ID: 35463932
try to check your DNS configuration properly ,forward/lookup reverse lookup .

check the forwarders tab.==>DNS property

 delete PTR , create a new one  again

is there any recorn in Even Viewer
0
 

Accepted Solution

by:
StarfishTech earned 0 total points
ID: 35776992
Believe it or not, our ISP was blocking ports on our firewall.
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 37498915
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you have come across a situation where you need to find some EDB mailbox recovery techniques, then here you will find the same. In this article, we will take you through three techniques using which you will be able to perform EDB recovery. You …
Upgrading from older Exchange server to the latest Exchange server can be tiresome, error-prone and risky, without being a seasoned exchange server administrators. It can become even problematic if you're an organization that runs on tight timeline…
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…
Suggested Courses
Course of the Month9 days, 20 hours left to enroll

569 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question