550 5.7.1 Sender ID (PRA) Not Permitted - Our record if remote.cmp.org.uk

Posted on 2014-11-10
Medium Priority
Last Modified: 2014-11-12
Hi, We got this back from an outgoing email today.

"550 5.7.1 Sender ID (PRA) Not Permitted" From what I can see online and previous questions the problem needs to be resolved at the recipients exchange who we have emailed successfully in the past.

Is there a work around at out end or something Im not seeing. Full DNR below.

remote.domain.com rejected your message to the following e-mail addresses:

Chris someone (csomeone@domain.com)

remote.domain.com gave this error:
Sender ID (PRA) Not Permitted

Your message wasn't delivered due to a permission or security issue. It may have been rejected by a moderator, the address may only accept e-mail from certain senders, or another restriction may be preventing delivery.

I noticed in the message below that the emails went out from our server "CMPSERVER.CMDOMAIN.local" our domain is cmp.org.uk MX records all point to remote.cmp.org.uk or cmp.org.uk


Diagnostic information for administrators:

Generating server: CMPSERVER.CMDOMAIN.local

remote.domain.com #550 5.7.1 Sender ID (PRA) Not Permitted ##

Original message headers:

Received: from optiplex2 ( by CMPSERVER.CMDOMAIN.local
 ( with Microsoft SMTP Server (TLS) id; Fri, 31 Oct
 2014 10:55:57 +0000
X-Archetype-Title: Hilton Brighton - Tech detail & CE Cert's
X-Archetype-ProjectNo: A3806
Message-ID: <ARCHETYPE-5ad4156c-1e60-e411-a1c9-901b0e0d5d56@7-141030-102051-6053>
Thread-Topic: Hilton Brighton - Tech detail & CE Cert's
Thread-Index: 5AD4156C-1E60-E411-A1C9-901B0E0D5D56
X-Priority: 3
X-Mailer: Version 13.03 (build 13.03.4867 - component Archetype.Modules.Email) - http://www.archetype.uk.net/
MIME-Version: 1.0
Date: Fri, 31 Oct 2014 10:55:57 +0000
Subject: Hilton Brighton - Tech detail & CE Cert's
From: Irene xxxxxxx <****@cmp.org.uk>
Reply-To: <****@cmp.org.uk>
To: Chris Someone <csomeone@domain.com>
Content-Type: multipart/mixed;
Return-Path: ****@cmp.org.uk
Question by:dlogan83
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2

Expert Comment

by:Abdul Khadja Alaoudine
ID: 40432252
Yes, the problem needs to be resolved at recepient's end. Looks like they are blocking emails from your end. This could also be recepient's server is checking your domain's SPF record and failing to find one / correct one.
LVL 36

Expert Comment

ID: 40432362
Definitely your own SPF record. Therefore, either ask the recipient to solve it for you (not reasonable, as SPF is a valid filtering option), or solve it yourself by having your current faulty SPF record fixed.

Your current SPF record:

"v=spf1 include:spf.remote.cmp.org.uk -all"

but you are NOT sending from the spf.remote.cmp.org.uk host at all!

Author Comment

ID: 40432373
Thanks guys,

Should I change the SPF record to cmp.org.uk ?
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

LVL 36

Expert Comment

ID: 40432383
That depends if your SENDING machine is really cmp.org.uk or not (having public IP Reverse DNS for is hostedc31.carrierzone.com though, so it might still fail.
To be sure, use the PUBLIC IP address of the sending machine.

Author Comment

ID: 40432436
Hi I changed the spf record and ran a test on http://vamsoft.com/support/tools/spf-policy-tester using my public ip and got this return.  We send emails out direct from our cmp.org.uk sbs2011 exchange server using our public IP, which i believe the MX records point to remote.cmp.org.uk. Should this also be revised to point to cmp.org.uk?

Sorry my knowledge is very limited on SPF records.

    SPF check start.
        Domain: cmp.org.uk
    Getting SPF (TXT) record.
    Found SPF record.
    SPF policy record data:
        v=spf1 include:spf.cmp.org.uk -all
    Evaluating SPF policy:
        v=spf1 include:spf.cmp.org.uk -all
    Policy parsed OK, no warnings.
    Evaluating SPF policy string.
        Evaluating SPF mechanism "include".
            Prefix: Pass.
            Argument domain-spec: spf.cmp.org.uk
            Domain argument after macro expansion:
            SPF check start.
                Domain: spf.cmp.org.uk
            Getting SPF (TXT) record.
            Got NXDOMAIN, returning SPF Unknown.
            SPF policy evaluation finished with SPF Unknown. SPF policy was not found.
        SPF Unknown / None causes evaluation to abort with SPF Unknown.
    Finished evaluating SPF policy.
    SPF policy evaluation finished with SPF Unknown.
LVL 36

Accepted Solution

Kimputer earned 2000 total points
ID: 40432469
your SPF record should be "v=spf1 include:public_ip -all"

where you replace public_ip with your real public ip.

If you're really sure the domain name is the correct IP:

your SPF record should be "v=spf1 include:cmp.org.uk -all"

You keep putting spf in front of the hostname, making it from valid to invalid.

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The new Gmail Phishing Scam going around is surprising even the savviest of users with its sophisticated techniques.
If you troubleshoot Outlook for clients, you may want to know a bit more about the OST file before doing your next job. IMAP can cause a lot of drama if removed in the accounts without backing up.
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Suggested Courses
Course of the Month9 days, 9 hours left to enroll

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question