need help with SMTP error 4.4.7 and 5.7.1

[Akhlaq Khan]

Hi,
we have been receiving bounce backs with SMTP error 4.4.7 and 5.7.1 with
certain domains/recipients on continuous basis in last few months ...

Bounce backs with error 5.7.1 say ...

You do not have permission to send to this recipient. For assistance,
contact your system administrator.
<ussww103.abc.local #5.7.1 smtp;550 5.7.1 Requested action not
taken: message refused>

And bounce backs with error 4.4.7 say ..

The following recipient(s) cannot be reached:
XYZUser on 12/21/2006 7:31 PM
Could not deliver the message in the time limit specified.
Please retry or contact your administrator.
<abcd.com #4.4.7>

On turning on the diagnostic logging, i found out that the error 5.5.7 was
generating event ID 7010 in the event log, which read:

"This is an SMTP protocol log for virtual server ID 1, connection #66. The
client at "xxx.xxx.xxx.xxx" sent a "xexch50" command, and the SMTP server
responded with "504 Need to authenticate first ". The full command sent was
"xexch50 1036 2". This will probably cause the connection to fail."

Similary, the error 4.4.7 was generating event ID 7004 which said:

"This is an SMTP protocol error log for virtual server ID 1, connection #58.
The remote host "xxx.xxx.xxx.xxx", responded to the SMTP command "xexch50"
with "504 Need to authenticate first ". The full command sent was "XEXCH50
1044 2 ". This will probably cause the connection to fail"

I am oberving more than hundred occurences of these errrors in an hour in
the event log, mostly because i think there are quite a number of emails in
queue which are in RETRY mode, but result in an NDR everytime.

Can anyone give me a clue of what might be going on?

Thanks & Regards,

Akhlaq Khan.

[Leif Pedersen [MVP]]

Hi,

It sounds to me that you are using a smart-host to deliver your emails and
that this smart-host requires that you authenticate yourself before you are
allowed to send mails.

Leif

Post by Akhlaq Khan
Hi,
we have been receiving bounce backs with SMTP error 4.4.7 and 5.7.1 with
certain domains/recipients on continuous basis in last few months ...
Bounce backs with error 5.7.1 say ...
You do not have permission to send to this recipient. For assistance,
contact your system administrator.
<ussww103.abc.local #5.7.1 smtp;550 5.7.1 Requested action not
taken: message refused>
And bounce backs with error 4.4.7 say ..
XYZUser on 12/21/2006 7:31 PM
Could not deliver the message in the time limit specified.
Please retry or contact your administrator.
<abcd.com #4.4.7>
On turning on the diagnostic logging, i found out that the error 5.5.7 was
"This is an SMTP protocol log for virtual server ID 1, connection #66. The
client at "xxx.xxx.xxx.xxx" sent a "xexch50" command, and the SMTP server
responded with "504 Need to authenticate first ". The full command sent
was "xexch50 1036 2". This will probably cause the connection to fail."
"This is an SMTP protocol error log for virtual server ID 1, connection
#58. The remote host "xxx.xxx.xxx.xxx", responded to the SMTP command
"xexch50" with "504 Need to authenticate first ". The full command sent
was "XEXCH50 1044 2 ". This will probably cause the connection to fail"
I am oberving more than hundred occurences of these errrors in an hour in
the event log, mostly because i think there are quite a number of emails
in queue which are in RETRY mode, but result in an NDR everytime.
Can anyone give me a clue of what might be going on?
Thanks & Regards,
Akhlaq Khan.

[Akhlaq Khan]

Leif,
strangely, this is not the case. we are not using any smarthost. could there
be any other reason?

i had doubts on failing RDNS lookup and SPF record. I recently worked to
setup both RDNS and SPF record for all mx records, now i am hoping to get it
fixed, but i am really not sure if that is the final solution. it could be
something else.

akhlaq.

Post by Leif Pedersen [MVP]
Hi,
It sounds to me that you are using a smart-host to deliver your emails and
that this smart-host requires that you authenticate yourself before you
are allowed to send mails.
Leif

Post by Akhlaq Khan
Hi,
we have been receiving bounce backs with SMTP error 4.4.7 and 5.7.1 with
certain domains/recipients on continuous basis in last few months ...
Bounce backs with error 5.7.1 say ...
You do not have permission to send to this recipient. For assistance,
contact your system administrator.
<ussww103.abc.local #5.7.1 smtp;550 5.7.1 Requested action not
taken: message refused>
And bounce backs with error 4.4.7 say ..
XYZUser on 12/21/2006 7:31 PM
Could not deliver the message in the time limit specified.
Please retry or contact your administrator.
<abcd.com #4.4.7>
On turning on the diagnostic logging, i found out that the error 5.5.7
"This is an SMTP protocol log for virtual server ID 1, connection #66.
The client at "xxx.xxx.xxx.xxx" sent a "xexch50" command, and the SMTP
server responded with "504 Need to authenticate first ". The full command
sent was "xexch50 1036 2". This will probably cause the connection to
fail."
"This is an SMTP protocol error log for virtual server ID 1, connection
#58. The remote host "xxx.xxx.xxx.xxx", responded to the SMTP command
"xexch50" with "504 Need to authenticate first ". The full command sent
was "XEXCH50 1044 2 ". This will probably cause the connection to fail"
I am oberving more than hundred occurences of these errrors in an hour in
the event log, mostly because i think there are quite a number of emails
in queue which are in RETRY mode, but result in an NDR everytime.
Can anyone give me a clue of what might be going on?
Thanks & Regards,
Akhlaq Khan.

[Leif Pedersen [MVP]]

Hi,

RDNS won't block messages and SPF record is only for the receivers checking
that your servers are allowed to send for your domain names so I doubt that
these can be the culprits.

Do you have an internal SMTP gateway that the mails go through or is the
exchange server directly connected to the internet?

Is it only one domain that wants you to authenticate or are there several?

Leif

Post by Akhlaq Khan
Leif,
strangely, this is not the case. we are not using any smarthost. could
there be any other reason?
i had doubts on failing RDNS lookup and SPF record. I recently worked to
setup both RDNS and SPF record for all mx records, now i am hoping to get
it fixed, but i am really not sure if that is the final solution. it could
be something else.
akhlaq.

Post by Leif Pedersen [MVP]
Hi,
It sounds to me that you are using a smart-host to deliver your emails
and that this smart-host requires that you authenticate yourself before
you are allowed to send mails.
Leif

Post by Akhlaq Khan
Hi,
we have been receiving bounce backs with SMTP error 4.4.7 and 5.7.1 with
certain domains/recipients on continuous basis in last few months ...
Bounce backs with error 5.7.1 say ...
You do not have permission to send to this recipient. For assistance,
contact your system administrator.
<ussww103.abc.local #5.7.1 smtp;550 5.7.1 Requested action
not taken: message refused>
And bounce backs with error 4.4.7 say ..
XYZUser on 12/21/2006 7:31 PM
Could not deliver the message in the time limit specified.
Please retry or contact your administrator.
<abcd.com #4.4.7>
On turning on the diagnostic logging, i found out that the error 5.5.7
"This is an SMTP protocol log for virtual server ID 1, connection #66.
The client at "xxx.xxx.xxx.xxx" sent a "xexch50" command, and the SMTP
server responded with "504 Need to authenticate first ". The full
command sent was "xexch50 1036 2". This will probably cause the
connection to fail."
"This is an SMTP protocol error log for virtual server ID 1, connection
#58. The remote host "xxx.xxx.xxx.xxx", responded to the SMTP command
"xexch50" with "504 Need to authenticate first ". The full command sent
was "XEXCH50 1044 2 ". This will probably cause the connection to fail"
I am oberving more than hundred occurences of these errrors in an hour
in the event log, mostly because i think there are quite a number of
emails in queue which are in RETRY mode, but result in an NDR everytime.
Can anyone give me a clue of what might be going on?
Thanks & Regards,
Akhlaq Khan.