Relay Blues, #5.7.1 smtp;550 5.7.1 Unable to relay, But I need to Relay

Discussion in 'Windows Small Business Server' started by Bernie Hunt, Mar 7, 2005.

  1. Bernie Hunt

    Bernie Hunt Guest

    Application. SBS1 at home behind cable. SBS2 at wife's office with full DNS
    and SMTP. I would like to keep the SBS running in my home office as a test
    bed, but I can't get Exchange set up to send mail. My ISP blocks port 25, so
    my mail is received via POP3 from two sources, my cable company and my own
    domain out west.

    My cable company will accept SMTP mail and relay if authenicated, but they
    are flackey. My SBS2 will relay with authentication. I use it regularly with
    my laptop on the road. It's set up with a hidden SMTP port to get around
    port 25 blocking. My domain out west will receive SMTP mail, but is blocked
    due to my local cable company.

    So I'm trying to use Exchange to relay my outgoing mail throught the SBS2
    box. All me messages are getting bounced with;

    You do not have permission to send to this recipient. For assistance,
    contact your system administrator.
    <mail.SBS1.com #5.7.1 smtp;550 5.7.1 Unable to relay for >

    I am able to forward mail to SBS2.com sucessfully. I read tons of messages
    on needing to stop relaying, but I seem to be the only person who can't open
    a relay.

    Am I reading this message correctly that it's coming from my local SBS? Is
    it Exchange or the SMTP service that is blocking?

    Any suggestions?

    Bernie
     
    Bernie Hunt, Mar 7, 2005
    #1
    1. Advertisements

  2. Bernie Hunt

    Tony Su Guest

    Test for SMTP connectivity first.

    From a command line on your SBS1 box,

    telnet SBS2 [port number]

    If you see a blank window, you've connected and SBS2 is waiting for your
    next command. If you see a failure, that tells you that you can't do what you
    want.

    My guess is you'll be blocked.

    Tony
     
    Tony Su, Mar 8, 2005
    #2
    1. Advertisements

  3. Hi Bernie,

    Glad to hear from you.

    From your description, I understand that you want to relay outgoing email
    from your SBS2 server. If I am off base, please let me know.

    Based on my research you should set up the SBS 2 server to relay the email
    from SBS1, as the SBS1 only have dynamic IP address, so you need to add the
    domain name of the SBS 1 to the relay list on SBS 2.

    As part of Setup and by running the Configure E-mail and Internet
    Connection Wizard, the following configuration is made for Exchange:

    Only clients computers with an IP address within the range of IP addresses
    for the local network, or authenticated users, are allowed to relay mail
    through the SMTP virtual server. This is to allow internal mail clients
    that do not authenticate to be able to send mail. The "Allow all computers
    which successfully authenticate to relay", regardless of the list above is
    checked by default. This allows any computer with valid authentication
    credentials to relay messages through the virtual server.

    1. Click Start, click All Programs, click Microsoft Exchange, and
    then click System Manager.
    2. Expand Servers, expand Servername, expand Protocols, and then
    expand SMTP.
    3. Right-click Default SMTP Virtual Server and then click
    Properties.
    4. Click the Access tab.
    5. Click the Relay... button at the bottom.
    6. The default settings block open relay. The default settings are
    as follows:
    A. " Select Only the list below.
    B. " The Computers dialog box shows Access Granted to the
    Internal IP address of the Small Business Server network and to the
    external IP address (if the server has more than one network card.)
    C. " Make sure that Allow all computers which successfully
    authenticate to relay, regardless of the list above is selected.
    7. You can then add the desired IP address to the lists.

    For more information please refer to the following Knowledge Base article:

    324958 HOW TO: Block Open SMTP Relaying and Clean Up Exchange Server SMTP
    Queues on SBS
    http://support.microsoft.com/?id=324958

    I appreciate your understanding; if you have any other concerns please let
    me know. It's my pleasure to be of further assistance.

    Best regards,

    Your Name (MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
     
    Charles Yang [MSFT], Mar 8, 2005
    #3
  4. Bernie Hunt

    Bernie Hunt Guest

    Tony,

    The port on SBS is working; Telnet mail.SBS2.com 2025 responds with;
    220 SBS2.com Microsoft ESMTP MAIL Service, Version: 6.0.3790 ready, etc, etc

    Bernie


     
    Bernie Hunt, Mar 8, 2005
    #4
  5. Bernie Hunt

    Bernie Hunt Guest

    Charles,

    I don't understand. As you said I don't have a fixed IP address for my
    sever. But in step 7 you say to enter the IP address. What IP should I
    enter? The range of possibles that I might have?

    If I add the domain name from SBS1, is it going to try to DNS verify that
    name against the address that is logging in?

    Thanks,
    Bernie

     
    Bernie Hunt, Mar 8, 2005
    #5
  6. Bernie Hunt

    Bernie Hunt Guest

    Charles,

    I did some more digging and found that yes the SBS2 is who is rejecting the
    message. I had assumed is was SBS1. So we are back to how to identify the
    messages sent by SBS1 as valid, when SBS2 cannot verify the DNS of SBS1.

    Bernie

     
    Bernie Hunt, Mar 8, 2005
    #6
  7. Hi Bernie,

    I am sorry not to make the things very clear, I means the IP of your SBS1
    server should be a dynamic IP from the ISP, also I means you have register
    your SBS1 with a domain name in the internet by your ISP. If so you can add
    this domain name to the list of SBS 2 SMTP relay. If not you need your ISP
    give you a static IP address for your SBS1. Of course, you can use some
    third part tools to resolve DNS problem. As for your convenience, I can
    offer you a tool, please refer to the following link:
    http://dns.widge.net

    I appreciate your understanding and hope the above information helps. If
    you have any other questions please let me know. I am standing by to help
    you.

    ===================================
    This response contains a reference to a third party World Wide Web site.
    Microsoft can make no representation concerning the content of these sites.
    Microsoft is providing this information only as a convenience to you: this
    is to inform you that Microsoft has not tested any software or information
    found on these sites and therefore cannot make any representations
    regarding the quality, safety, or suitability of any software or
    information found there. There are inherent dangers in the use of any
    software found on the Internet, and Microsoft cautions you to make sure
    that you completely understand the risk before retrieving any software on
    the Internet.
    ===================================

    Best regards,

    Your Name (MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
     
    Charles Yang [MSFT], Mar 9, 2005
    #7
  8. Bernie Hunt

    Bernie Hunt Guest

    Hmmm, so there is no way to relay mail using just NT security for
    validation? I was hoping to get around the dynamic IP issue by supplying a
    valid user account on the SBS2 box. Are you saying this is not possible?

    Thanks,
    Bernie
     
    Bernie Hunt, Mar 9, 2005
    #8
  9. Hi Bernie,

    According to my knowledge, Smart Host is just a dedicated SMTP Server that
    allows e-mails from your domain to relay to other domains and you can use
    Smart Host in your Exchange Server to simplify the message
    transport/routing process. Actually, we can simply configure the SMTP
    Service on a Windows 2000/2003 Server to act as Smart Host. For more
    information about how to set up Smart Host by using Windows 2000 Server,
    please refer to the following Knowledge Base (KB) article:

    293800.KB.EN-US XCON: How to Set Up Windows 2000 as a SMTP Relay Server or
    Smart Host
    http://support.microsoft.com/default.aspx?scid=KB;EN-US;293800

    You need set up the smarthost on SBS1 where the email should be sent.

    If the problem still occurs, please kindly paste the error message in the
    event view.

    Hope the above information helps. I look forward to hearing from you.

    Best regards,

    Your Name (MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
     
    Charles Yang [MSFT], Mar 10, 2005
    #9
  10. Hi Bernie,

    Just want to add something. As I know we recommend to a static IP for open
    relay. So it will not impact your smtp server. Or it might be impacted by
    the spam emails.

    If you want to relay email via a authenticate account, you need also hold
    the account in these two SBS domain.

    I appreciate your understanding.
    Best regards,

    Your Name (MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
     
    Charles Yang [MSFT], Mar 10, 2005
    #10
  11. Hi Bernie,

    Based on my further research, you can use the following way to forward the
    email to a mailbox at SBS2 domain then use SMTP relay for that users.

    Hi Bernie,

    Another workaround for you.

    You can create a new contact which presents the external email and then
    forward to this contact. Therefore, you will beable to implement what you
    want to do. Please refer to the following steps.

    Create a new contact
    1. Open Active Directory and Users. Locate the place you would like
    tosavethe contact to.
    2. Click "Action"->"New"->"Contact".
    3. Field in the information for this external email address (notice:
    YourExchange server should be configure to have the capability to deliver
    emails to external domains).
    4. On the Create an Exchange e-mail address screen, click "Modify", select
    "SMTP Address" and input the external email address in SMTP addressformat.
    5. Click "OK" to create this contact.

    Configure forward for a specific user

    1. In Active Directory and Users or SBS Server Management console, open
    theuser account.
    2. Click "Exchange General"->"Delivery Options".
    3. Check "Forward to" and then click "Modify".
    4. Pick the contact and click "OK".
    Thus, the email is configured to be forward to this contact automatically.

    Hope the steps helpful to you.

    Best regards,

    Your Name (MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
     
    Charles Yang [MSFT], Mar 10, 2005
    #11
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.