why this problem

Send test e-mail message: Cannot send the message. Verify the e-mail address in your account properties.  The server responded: 530 authentication required

I have a problem when I try to send an encryption message with attachment to the external recipients it always return '550-5.7.162'.

But I can send a normal message success and also I can send encryption message success to other domain recipients.

Error message:

<user>@TARGETDOMAIN.com

Remote Server returned '550-5.7.162 OmeEncryptionAgent; Permanent Failure 550-5.7.162 Exception encountered: RightsManagementException. 550-5.7.162 Failure Code: AttachmentProtectionFailed. 550 5.7.162 Please contact your system administrator for more information.'

<user>@TARGETDOMAIN.com

Remote Server returned '550-5.7.162 OmeEncryptionAgent; Permanent Failure 550-5.7.162 Exception encountered: RightsManagementException. 550-5.7.162 Failure Code: AttachmentProtectionFailed. 550 5.7.162 Please contact your system administrator for more information.'

Original message headers:

Authentication-Results: spf=none (sender IP is )
 smtp.mailfrom=geoffrey@OURDOMAIN.com; 
Received: from DM3PR15MB1017.namprd15.prod.outlook.com (10.166.160.13) by
 DM3PR15MB1017.namprd15.prod.outlook.com (10.166.160.13) with Microsoft SMTP
 Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
 15.1.860.13; Fri, 27 Jan 2017 14:24:37 +0000
Received: from DM3PR15MB1017.namprd15.prod.outlook.com ([10.166.160.13]) by
 DM3PR15MB1017.namprd15.prod.outlook.com ([10.166.160.13]) with mapi id
 15.01.0860.023; Fri, 27 Jan 2017 14:24:36 +0000
Content-Type: application/ms-tnef; name="winmail.dat"
Content-Transfer-Encoding: binary
From: Geoffrey Chua <geoffrey@OURDOMAIN.com>
To: "Eligibility@TARGETDOMAIN.com" <Eligibility@TARGETDOMAIN.com>
CC: "jmaxwell@TARGETDOMAIN.com" <jmaxwell@TARGETDOMAIN.com>
Subject: ENCRYPT: Insured List 1.27.2017
Thread-Topic: ENCRYPT: Insured List 1.27.2017
Thread-Index: AQHSeKefIqkjARWAkEOEp2hcPmzg8Q==
Return-Receipt-To: <geoffrey@OURDOMAIN.com>
Date: Fri, 27 Jan 2017 14:24:36 +0000
Message-ID: <DM3PR15MB1017672BCC6C710F6C4F195CA1760@DM3PR15MB1017.namprd15.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: <DM3PR15MB1017672BCC6C710F6C4F195CA1760@DM3PR15MB1017.namprd15.prod.outlook.com>
MIME-Version: 1.0
X-Originating-IP: [98.175.25.85]
Return-Path: geoffrey@OURDOMAIN.com
X-MS-Office365-Filtering-Correlation-Id: b9b96bae-6242-4548-3024-08d446c038d4
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:DM3PR15MB1017;
X-Microsoft-Exchange-Diagnostics: 1;DM3PR15MB1017;3:a/164+lbP3xZLQWJElS+1KGID2X+yBC55gMfol1k1u+eE7u8oJNFy51hFJ/4knRd/FPYnoe2uqoIvL1zuHDk25b2ogzi7Hw2QSAtKqcf4RkRG7HO2dnFNNuQhAOjcmow9QSoYQlZp7CODnyDNORXoJv8W6adiSLPXXEP4Irk8Ps5T+kzUTreH/+sAfApj6c4cmylWWPDwMXUMJlwzOo3Zsc0kPpWcJNNqMpOw+9YVXx6Xc8jyCtUhX+z3OuQac3BdJiA4mJkrNRjp1PM5qP+TA==;25:gEsmJ69itLCf/Zvo8jUVAbo4Q1jhB3ztzKwQDg8OW5FozKfNpPx0Nkz9ixuD53I7e8EyY6M5aQaH/2rg/2D9Sw7qn6SiDNHPCeH4BH7rlOsIfiswcerLrD1gbGTZ7c/WIFqW8rx/oqrJYK5XBy1xe988O+fqAv49AhJtdrdB6bijYZpAibD8VqtJM/5pCKyL0UIQ1gfASXUoh9rtiNrzGC1qrdwtuRCMJUSjkE11zYRUB6CTsJdS6iB8+ctltczcRQaHDe8JXHBb1d9u5IZNlm3Jp0MTe5aCT2ek5HsnThkz4/0YQxxHkMUefY/XCxbMpmiLkVXHdQTgwwOh3zK9TH0PV7/fWeztm7YwQ9X6N38EdJiY0At/8be5rAqwx7F0bgC27YwZB1tgRBS9wJh/Fimd82bNCrm6b59ZxAw5bGQoq6V9RHsCMbjpzdHjZKW4pH5pXEcLsnw2jy8AwxZNjBT3lIdGjlG/FWX8Wqp/y/+C9Dk1k+vUe5gi0gYqrIei2bgiTvqhdpVJf4xN74Eq3hVFTgh6R2FQ7RDvHP20HgdJD4gqU9eWE6apG3FCS1vA5YCSJH8/PUmHuclCXkLMFw==
X-Microsoft-Exchange-Diagnostics: 1;DM3PR15MB1017;31:tjOggTfQku1af5r89bsfNdVW4Nm4Kcm9L5EPGRHzT0zvGRWj3LN8xWkv38MornkeY2G8J+RtMcgddchR3GU4auv/BcPxLX+O77PHll0mnwh/zXjbR2/xdKijMjSUZahrt7p+uq++DqA5doe1ZKka/W2UfzFguFjGa90RUWXRpI/ZcEb/VbcXP+F7mHjXHHgjyglMGN5HCMeTV4ha9zkzzYUaRT1+lidwilyabuKwrrvsspFbs4Ae+923DD0E/Y2Mpu/sV73eyIBJhG5gKDOqdfeJOzzC6ua+XlEfntPFjTtMP568wpBTHdpRgc5fwzMLxueIXCtUc1dlEnuJFCUavQ==;20:ROB9qc12CNRN/0qXKHp/JXUuzxDBxfTnquBEH5ra4zZL872is/QTsgUdBChCptj0IEgXC/7g12JQJmbTr9nE9er4ZwTUicsHl5izDq1WrPI5hjDW3omnOXa+ckkUEWr4c3b2pyUjxryVuvJ91gv/MVXPNnmwmHwtG+IzNLSsH4FDgffGVr9/pdiLbKng9uPUGpkWzbeBAyc62lXOm+1/2oKVAjcXGjPGEucx60AVzsm67xnGHDO0tmGHT19B8O5v
X-Microsoft-Antispam-PRVS: <DM3PR15MB1017A13CE6B9B2A29DC1510DA1760@DM3PR15MB1017.namprd15.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(102415395)(6040375)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6041248)(20161123555025)(20161123564025)(2016111802025)(6059035)(20161123562025)(20161123558021)(20161123560025)(6072148)(6043046);SRVR:DM3PR15MB1017;BCL:0;PCL:0;RULEID:;SRVR:DM3PR15MB1017;
X-Microsoft-Exchange-Diagnostics: 1;DM3PR15MB1017;4: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
X-Forefront-PRVS: 0200DDA8BE
X-Forefront-Antispam-Report: SFV:NSPM;SFS:(10019020)(6009001)(7916002)(39450400003)(39410400002)(39830400002)(5423002)(189002)(199003)(9686003)(2351001)(54896002)(81156014)(53936002)(55016002)(8936002)(5640700003)(8676002)(99286003)(586005)(68736007)(110136003)(38610400001)(5660300001)(3660700001)(77096006)(92566002)(122556002)(86362001)(7696004)(81166006)(7736002)(74316002)(2906002)(105586002)(97736004)(101416001)(6916009)(99936001)(106356001)(106116001)(189998001)(2900100001)(6606003)(5890100001)(6116002)(102836003)(3846002)(19627405001)(25786008)(3280700002)(6506006)(50986999)(450100001)(54356999)(33656002)(6436002)(66066001)(2501003)(4326007);DIR:OUT;SFP:1102;SCL:1;SRVR:DM3PR15MB1017;H:DM3PR15MB1017.namprd15.prod.outlook.com;FPR:;SPF:None;PTR:InfoNoRecords;MX:1;A:1;LANG:en;
Received-SPF: None (protection.outlook.com: OURDOMAIN.com does not designate
 permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1;DM3PR15MB1017;23:9WfjZFsALqV9QVOX1OpUKAqyNGiRjhsMSZG131D03?=

<style type="text/css">p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; font: 9.0px Menlo; color: #808080; -webkit-text-stroke: #808080} p.p2 {margin: 0.0px 0.0px 0.0px 0.0px; font: 9.0px Menlo; color: #4787ff; -webkit-text-stroke: #4787ff} span.s1 {font-kerning: none} span.s2 {font-kerning: none; color: #808080; -webkit-text-stroke: 0px #808080} span.s3 {text-decoration: underline ; font-kerning: none; color: #4787ff; -webkit-text-stroke: 0px #4787ff} </style>

Hi,

We are running MSX2010 in a DAG cluster with comprised of two servers. One server runs all active copies of the databases and the other is for fault tolerance.

One particular mailbox accessed by a few users is configured to forward messages to a mail contact which points to an external SMTP address AND keep a copy of the message (Deliver message to both forwarding address and mailbox).

This has been working fine for many months.

Recently someone at the external SMTP address mailbox noticed that not all messages sent to the shared mailbox are being forwarded to the external SMTP address. I have checked a few senders at both ends and it seems like this problem started within the past 3 - 4 days.

We haven't made any changes to either mail system.

When I use the delivery reports tool to investigate FROM 'user address' TO 'shared mailbox' I can see:

• Older messages include the recipients, shared mailbox AND an entry with the status of TRANSFERRED to the mail contact pointing at our external SMTP address.
• More recent messages include the recipients, shared mailbox but NO entry of TRANSFERRED to the mail contact

HOWEVER some users who email the shared mailbox DO get their messages forwarded to the mail contact and the delivery reports tool does have the transferred mail entry.

The difficulty in diagnosing this problem is that it is NOT impacting ALL users. Does anyone know where I could start looking for errors.

No one is receiving any failed delivery reports.

Thanks in advance!!

Hi Guys,

I've run into a problem with the current limitations of Exchange 2010's retention policies as it can't differentiate between Internal or External E-mails.  I'm looking for any 3rd Party solutions that can provide a more comprehensive set of rules and policies that I can apply on Exchange 2010 SP2 (SBS 2011). 

So far I've found Sherpa's Software: Mail Attender [http://www.sherpasoftware.com/downloads/Sherpa-Software-Exchange2010-Comparison.pdf] but I'm wondering what the communities general consensus on it is and if there are any other good solutions I should check out.

Thanks

Hi

I have a odd problem, i cannot receive attachments from some domains such as Hotmail.com. Having said that i can receive small attachments up to about 200kb from the same domain. We have deployed Exchange 2007 SPK1 Two Hub transport servers and a CCR-cluster but no Edge transport server. Most domains have no problems sending large attachments, this only effects some domians.

I have checked transport settings, organization level, send/receive connectors and mailbox all are set to 30 mb. I also have Mcafee groupshield for exchange installed on Hub Transport servers also with the right attachment settings. I also tried disabling this but to no avail.

This only started to occur when i finally removed the last exchange 2003 server from our domain, everything else works perfectly, but for this odd problem. When mail is sent from problem domains with attachments it never arrives (without attachments is fine), and the sender will eventually receive the following:

Your message did not reach some or all of the intended recipients.

      Subject:            FW: email

      Sent: 28/04/2010 08:00

The following recipient(s) cannot be reached:

      user@Domain on 30/04/2010 08:16

            Could not deliver the message in the time limit specified.

Please retry or contact your administrator.

            <domain #4.4.7>

or usually the NDR is regarding delayed messages. I have also checked we are not on any blacklist, i have also created a new send connector, to rule out content filter i have tried also to exclude the hotmail.dom domain.

Anyone seen or experienced this before, much appreciated.

Khal.

I am using exchange server 2013 and it is is working in server 2008 R2 platform. IT has  two MBX server and two CAS server Role. There si no issue in sending and receiving internal and external mail. For spam filtering we are using  Sonic wall Hosted Email security. it is a could service from sonic wall and i have administrative level interface through in web.  

But recently i found, mail from a particular domain taking long time to deliver in our domain but there is no  problem to send mail from our domain to that particular domain. In the header analysis of a mail from that particular domain , i  found the the sonic wall taking long time to accept  the mail from that particular domain.  I open a case with sonic wall hosted email security and after a long email query and their investigation they concluded, the delay is due to local rejection of mail from our email server, not with them

Any of you know what is this local rejection of mail in  Exchange server 2013?

Hi,

We have Exchange 2010 Hybrid with Office 365. MX record points to our onprem Exchange. After another company bougth us we have request to change the MX record. MX record needs to point on another organizations Exchange. They will add our domain as Internal relay domain.  So every mail for our organization would go through their Exchange. So my question is will this affect our Hybrid deployment? Can it be done? Do we need to change Hybrid deployment?

A hacker <g class="gr_ gr_77 gr-alert gr_tiny gr_spell gr_inline_cards gr_run_anim ContextualSpelling multiReplace" data-gr-id="77" id="77">i</g> would presume employee of <g class="gr_ gr_86 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling ins-del multiReplace" data-gr-id="86" id="86">microsoft</g> <g class="gr_ gr_95 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling ins-del multiReplace" data-gr-id="95" id="95">hong</g> kong is hacking my computer and I have caught him destroying my <g class="gr_ gr_231 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling ins-del multiReplace" data-gr-id="231" id="231">blizz</g> games and griefing me by crashing me.  I reported this to blizzard and blizzard support was fail and said no problem.  <g class="gr_ gr_570 gr-alert gr_gramm gr_inline_cards gr_run_anim Punctuation only-ins replaceWithoutSep" data-gr-id="570" id="570">Well</g> I hope there <g class="gr_ gr_420 gr-alert gr_gramm gr_inline_cards gr_run_anim Grammar multiReplace" data-gr-id="420" id="420">is</g> some good people left at Microsoft who will hunt down this hacker employee from Microsoft and discipline them.

nestat result cmd prompt:

 TCP    192.168.1.2:49694      23.99.125.126:https    ESTABLISHED

https://www.iplocation.net/ result of reverse DNS

Geolocation data from IP2Location (Product: DB6, updated on 2017-7-1)

IP Address	Country	Region	City
23.99.125.126	Hong Kong	Hong Kong (SAR)	Hong Kong
ISP	Organization	Latitude	Longitude
Microsoft Corporation	Not Available	22.2855	114.1577

Hello,

I have a server 2016 and exchange 2016.

All are good running. Emails are sending and receiving from outside and inside as well.

I install the antispam agents and after that i dont become any emails.

Could someone explain me why ?

Thanks for the answer.

gicret

I'm looking for the best way to query Exchange Server 2016 access log looking for mail account logged into by certain IP address.

I think I can use Powershell (Exchange Management Shell) to query exchange server directly asking about access log of certain IP address right ?

Hi all,

I'm almost done with my Exchange 2010 deployment and I have gotten to the point where I am doing work with Retention Tags and Retention Policies. 
I disabled the default Retention Tags (e.g. "1 Month Delete", "1 Week Delete", etc) and thus, the default Policies, but I also created my own tags and my own policy. 

The tags are as such:
Deleted Items - Permanently delete items with an Age Limit of 180 days
Drafts - Permanently delete items with an Age Limit of 180 days
Journal - Permanently delete items with an Age Limit of 90 days
Sync Issues - Permanently delete items with an Age Limit of 30 days (thanks Outlook 2010 bug...)

I also created two Tags with the "Port from Managed Folder to Tag..." option with the following settings:
Calendar - Permanently delete items with an Age Limit of 730 days
Tasks - Permanently delete items with an Age Limit of 730 days

All of these items were tied in to a Policy named "Company Standard Retention", but it seems that they may not be running properly, because none of the entries in my Calendar (older than two years) are being deleted.  I also have a few old Contact records in my Deleted Items that say "This item has expired", but they won't delete. 

Am I doing something wrong?  I read through the forums and it appears that a lot of folks are having some problems, but a lot of them have been remedied by using "Permanently Delete" instead of "Move to the Deleted Items Folder", which I'm not even doing. 

The only other things that I can share that might help:
-I had an older "Mailbox Manager" Recipient Policy (Exchange 2003) that was copied to an E-Mail Address Policy on 2010.  It was still there when I created these Tags/Policy, but I removed it via Shell late last week. 
-We are running Symantec Enterprise Vault to manage our E-mail Journaling and Archives.  Along with that, Vault manages the deletion of items that reach a certain age in all other Mailbox folders (Inbox, Sent Items, "custom" user-created folders, Junk E-Mail, RSS Feeds, etc). 

Any insight that can be provided would be welcome. 

Thanks in advance!  :)

found that the edge server based on Exchange 2010 service pack 3 Ru17 returns PermError for valid SPF records with 'redirect' directive:

for example manual check for telus.com return

v=spf1 redirect=_spf_telus_com.nssi.telus.com

most of SPF checking tools return ok for this domain,

and this behavior for this domain was not changed at least 3 year.

Hello,

I am responsible for a server running Windows Server 2012 R2, which hosts a few purchased web-based applications. One of these applications needs to send notification e-mail messages via our internal Exchange server. I have done the following, but it doesn't work:

• Received confirmation from the Exchange team that the web server has relay access.
• Configured the SMTP E-Mail Settings in IIS to point to our Exchange server.
• Installed SMTP service on the Web server.
• Configured the Virtual SMTP Server in the IIS 6.0 console - received GeneralFailure from the app.
• Removed settings from Virtual SMTP Server - app now says the email function succeeded, but nothing has been received.
• Used telnet to connect to Exchange server to send test message - success.
• Used telnet to connect to web server locally to send test message - "queued mail for delivery", but never sent.

The app vendor says the issue is with our SMTP settings. This seems confirmed by the fact that the message fails to send via telnet. I really need to get this fixed.

Thanks in advance.

David V ACTI

Hi all,

  We are having issue with the receiving of an email with lager size. if simple text email of 7 KB or small is send from the external users, emails are getting received quickly. but when the size of an email is increased like about 400 KB or above it takes around an hour to get received those size of email from the external users.

I have check the Firewall rules, Anti spam rules and exchange filter rules all those are been disabled. Request for your help that how can we fix such kind of issues.

Thank you for your support.

Hi

Can I Append text to the Display Name outbound using hub transport.

Thanks

Steve

We have 2 Exchange Servers 2010 SP3. One is installed on Windows Server 2008 R2 and other is installed on Windows Server 2012 R2. I have enabled Antispam settings on hub transport on both exchange servers, all settings are enabled.



we don't have edge transport server. I am getting spam emails with some particular contents in emails. i added that phrases from spam email into content filtering properties under "Block messages containing these word or phrases" and enabled Delete messages (SCL Rating >= 8), Reject Messages (SCL Rating >= 7), Quarantine messages (SCL rating >=6). Also defined Quarantine  Mailbox Email. Then i send a message with same contents (which i added in block messages) in email from my gmail but the message was not blocked and i received the message in my corporate email. It was supposed to be blocked but it didn't. 

Using the smtp.office365.com  Port 587 Connection Security STARTTLS I get the following error:

An error occurred while sending mail. The mail server responded:  5.2.0 STOREDRV.Submission.Exception:SendAsDeniedException.MapiExceptionSendAsDenied; Failed to process message due to a permanent exception with message Cannot submit message. 16.55847:69000000, 17.43559:0000000060010000000000000000000000000000, 20.52176:010FD88405004010F1030000, 20.50032:010FD88470174010F1030000, 0.35180:010FD884, 255.23226:F1030000, 255.27962:32000000, 255.17082:DC040000, 0.27745:80030400, 4.21921:DC040000, 255.27962:FA000000, 255.1494:80030400, 0.37692:0F010480, 0.37948:0F010480, 5.33852:00000000534D545000000000, 4.56248:DC040000, 7.40748:010000000000010BA9000000, 7.57132:01000000B4D155BD3A633963, 1.63016:32000000, 4.39640:DC040000, 8.45434:000007004380BF4B00000000000000000F010480, 5.10786:0000000031352E30312E313234302E3030303A435934505230314D42323637393A63396333383732352D643130632D343663382D386330382D6236383139353236363834610040100F010480, 255.1750:09010480, 255.31418:09010480, 0.22753:2C000000, 255.21817:DC040000, 4.60547:DC040000, 0.21966:70000000, 4.30158:DC040000 <c63349d9-0218-cbb3-68b8-f34d8847e5bc@ieee.org> [Hostname=CY4PR01MB2679.prod.exchangelabs.com]. Please check the message and try again.

I've tried using the regular SMTP server and that doesn't work either.  The problem occurred suddenly for no apparent reason. There's no problem writing with the g-mail server. There;s also no problem with the input server.  I'm operating with Windows 10. I;v used a simple message: "This is a test" for testing purposes sent to an msn.com e-mail address which is valid