Remote Server returned/ Client was not authenticated to send anonymous mail during MAIL FROM [BN6PR12CA0048.namprd12.prod.outlook.com]>

I need a solution

Hello,

We cancled our Symantec account a couple of years ago and sicne then quite a few institutuions/business have been unable to email us as emails addressed to our domain are retunred undeliverable.  Recently we were advised that the issues appears to be that as a former Symantec customer that we did not terminate the service properly after we moved to Office 365. We were advised to contact Symantec to have the service compeletly terminated.  Below is a sample of the error message inclusive of the Diagnostic Info,  recieved by someone attemntting to email us.  A Symantec message does appear in the diagnotic in the diagnostic information: 

(using TLS with cipher AES128-SHA (128/128 bits))

        (Client did not present a certificate)

        by znpcpapbrg01i.bnymellon.com (Symantec Messaging Gateway) with SMTP id 18.7C.04270.F113C6C5; 

Below is the full error message.  Please advise if this can be reolved.  Many many thanks. 

Delivery has failed to these recipients or groups:

erogers@bradmer.com
Your message wasn’t delivered because the recipient’s email provider rejected it.

Diagnostic information for administrators:

Generating server: server-2.bemta.az-d.us-east-1.aws.symcld.net

erogers@bradmer.com
Remote Server returned ‘554 5.7.0 < #5.7.57 smtp; 530 5.7.57 SMTP; Client was not authenticated to send anonymous mail during MAIL FROM [BN6PR12CA0048.namprd12.prod.outlook.com]>’

Original message headers:

Return-Path: <george.gasson@bnymellon.com>

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bnymellon.com;

        s=BNY071018; t=1550594340; i=@bnymellon.com;

        bh=6CKn9+xMacgVsGmREMvRZd4vqsvhSI3dyrd8owANg1Y=;

        h=From:Subject:Date:Message-ID:Content-Type:MIME-Version:To;

        b=hDVm3hyZkP8nMSAIMHRKbKCHkfVy5CuolxDZMQgfL5c0ZG/8kPeRB5s6iGJy17ny0

        rSvDe2KQlABFBoFpw5do1kJCAOY2zSl7T6CL8bme4Z1HPDQwc1jyGojWI7R+8JO839

        lv8ZXnqSoW4gSfDH+WbyI6Jn1mX7Pq/LGTtJHXXn+Y0VcsI2e3WUUv9P7YcSCwWH53

        l1c87rxg1ZdCbNlL8DYi8j3IsU0jsrJNinG3z6NcF3jklLox0ngbGQtMjXY9TrVBjG

        sm5etZNEnqxZQeR380yZJWKQqc0/WvjttDEZsYB7rjr7cqwBv7wLiRyUvqSXKR1c4E

        ROsTtP5On/0Vw==

Received: from [67.219.247.54] (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256 bits))

        by server-2.bemta.az-d.us-east-1.aws.symcld.net id 4B/16-27512-4213C6C5; Tue, 19 Feb 2019 16:39:00 +0000

Authentication-Results: mx.messagelabs.com; spf=pass

  (server-29.tower-426.messagelabs.com: domain of bnymellon.com designates

  67.219.247.54 as permitted sender) smtp.mailfrom=bnymellon.com;

  dkim=none (message not signed); dmarc=none header.from=bnymellon.com

X-Brightmail-Tracker: H4sIAAAAAAAAA2VUe0xTdxT2d1+9IMXy0h+ELbPE7GU7cC47y8b

  ijHE3kC0LZiQ6oxZbabNSSFsmbMmCk7HBeIgQgQKF8X5GkOIEBIoPnmMghsFU3gWCCE7jY06B

  3XLBueyfk++c7zvfOecmv8uSrrUOXqwqyqjS6xRaKeNIVfhXn5D5+GkP+l4/7QCmxgEE46MXK

  VhOfUDCaE09Be02CwnTKfk0xD48Q8CfkxYG+lqsNKwMt9KQUmSjIXXwKg3t8cUkXH4wKII/ho

  Pgae9dBIkX8yiIyXwFruR5QsvVDhoqG7IRTJzspCF7cYyB/sk+CmYzx0hYav2OhNrZERLi0vx

  hfqaFghpLLQ0J/c8ouJdoFcGVLBMN15uLKWg+X4JguqMaQX9+G4LR8WYR9NSdoWDwUR4DdS0m

  ChbKlkQwP15FwoW/ykXw26W/CRjJshBwcrGQgIfTJgbi41cQzFTEELCUdwxKZ54gsHYskfDwa

  rUIOptvMDBcZmWge+FHAgZLivgri8YJSK1JJeBmRxfBf6YC/p65eBIscYnMLiWXXmAjuZqnY4

  gbayoXce0lrSTXOeTCdY7EkFzS3DLBxa40iriaqbM0l/WDmeTSpnIQZy18SnIZyc00d/1+C8U

  lxjfS3EzsPPHZtgO0RhcSHnWEVncV6yLMxSgqp6mejEF9GSgBObBYshM3Fw5TCciRdZW0Efhu

  kpkRkssI9zZlEELyDOEnifMiITnHMyeshL2f4ftrkstWvdwkcjz+u13kwLpL3sbnJ6sJAcvxY

  Osdvs6ylGQbHur/2F4WSz7Ad2qnSTtGks34cXfVqpyUbME3bHmEsJ47nrjWwwjYA89NLdMC9s

  EdxWWUoP8W19fdIwVPF9yVZaOEsd4481Teaq+r5DWcZR5a83kZV5+9R9tvwZLTG7HtRAF9Cm0

  2vTDb9IKv6QVfoX4U30oaYwS8Hec33V/Db+KSn+fJdfyrdYr4f307rhtoWPPZiuPis3mNI48L

  EW6qSiHWRXMLi/S6KP2nCVE+ElegnSF6TajaGKbQaGV+vr4yP78dsvdkfnLF1zKlPNIgUykMR

  nt63CA3RIcd1SrlOpXxHOIfqDLCAV1AltLQS8iTJaQe4szXtQddnUPCldFqhUF9WB+pVRkuIW

  +WlWLxbl+ec9GrQlVRxzRa/pWv05h1krqLx+202BChCDNoQgWqGwWyDY8nckm2azUm187w0TJ

  mj42rcbRtNpd0pXThOpXXFvFHdguJ3UIdqXs+YP1PMoBe8nITow0bNrg6Raj0YRrjf/nbaAuL

  pG7Cnk4anfH5Hrf5FQl+RdPKl/YVjYp/Ka8YlNx7oPf9gMGQPTnKkMmSQJ+iykMb31pxf8f8f

  blNseMrj0/V3p8776UOffLL8eTgrVB+q+dm+iNiVLn/m1mb/yZ9256gRbiWG8080zq+OyIrjS

  rb3V8bLJIu9Kk/rMoMIKdUQQEe+5zLX927b1e/T4X8sH9gZ3Bw36aiI5VfeJrTdu2XUga1wu8

  NUm9Q/ANRxQlcRAUAAA==

X-Env-Sender: george.gasson@bnymellon.com

X-Msg-Ref: server-29.tower-426.messagelabs.com!1550594311!2056042!25

X-Originating-IP: [170.61.173.129]

X-SYMC-ESS-Client-Auth: outbound-route-from=pass

X-StarScan-Received:

X-StarScan-Version: 9.31.5; banners=bnymellon.com,-,bradmer.com

Received: (qmail 8740 invoked from network); 19 Feb 2019 16:38:59 -0000

Received: from znpcpapbrg01o.bnymellon.com (HELO znpcpapbrg01i.bnymellon.com) (170.61.173.129)

  by server-29.tower-426.messagelabs.com with DHE-RSA-AES256-GCM-SHA384 encrypted SMTP; 19 Feb 2019 16:38:59 -0000

X-AuditID: 0aa06eb7-ff3ff700000010ae-64-5c6c311ff12f

Received: from WTPCPHTMEM02.ams.bnymellon.net (wtpcphtmem02.ams.bnymellon.net [160.254.249.175])

        (using TLS with cipher AES128-SHA (128/128 bits))

        (Client did not present a certificate)

        by znpcpapbrg01i.bnymellon.com (Symantec Messaging Gateway) with SMTP id 18.7C.04270.F113C6C5; Tue, 19 Feb 2019 11:38:55 -0500 (EST)

Received: from WTPCPEXMEM50.ams.bnymellon.net (10.88.250.171) by

WTPCPHTMEM02.ams.bnymellon.net (160.254.249.175) with Microsoft SMTP Server

(TLS) id 14.3.408.0; Tue, 19 Feb 2019 11:38:55 -0500

Received: from WTPCPEXMEM47.ams.bnymellon.net (10.88.250.168) by

WTPCPEXMEM50.ams.bnymellon.net (10.88.250.171) with Microsoft SMTP Server

(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id

15.1.1531.3; Tue, 19 Feb 2019 11:38:54 -0500

Received: from WTPCPEXMEM47.ams.bnymellon.net ([10.88.250.168]) by

WTPCPEXMEM47.ams.bnymellon.net ([10.88.250.168]) with mapi id 15.01.1531.003;

Tue, 19 Feb 2019 11:38:54 -0500

From: “Gasson, George” <george.gasson@bnymellon.com>

Subject: Markets in review week ending 2/15/19

Thread-Topic: Markets in review week ending 2/15/19

Thread-Index: AdTIcZkQ+XuS/IPwQHKb7fmVvhjN7A==

Date: Tue, 19 Feb 2019 16:38:54 +0000

Message-ID: <ee9356a4afd54921b7587364d60ee53b@bnymellon.com>

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-TNEF-Correlator:

x-originating-ip: [167.222.211.240]

Content-Type: text/plain

MIME-Version: 1.0

To: Undisclosed recipients:;

X-CFilter-Loop: Reflected NPC6

X-Brightmail-Tracker: H4sIAAAAAAAAA2WTa0ybZRTHfd5radb5DmF7xGVBdIm6UYduyUncjPGDe78YxUSNCwnr4N0l

        K6UpEwdG0wki7dgY2QK0ENpxE9iQIoVtsJYOgRaQAcOOOsO9BUkHygQncrPwQkLit98553/+

        55wneSRk8DwbJjmjOidoVAplBCOlpGZVXWR4lDLmQLr+WTA2PkAwMnSXgpWcORKGLPUUtHut

        JPiyzTSkz+cS8OeYlYEeu4OGVU8zDdmlXhpy3G00tOvKSPhpzs3Cr56PYLH7DwRZd00UaPPD

        odX0PNjbnDTcuFOAYDTNRUPBzDADvWM9FEzmD5Ow3PwNCbWTgyRkXD0C/gk7BRZrLQ363iUK

        ZrMcLLQajDT028oosDWUI/A5qxH0mu8hGBqxsdBVl0uB+28TA3V2IwXTFcss+EduknD7n0oW

        7rf8S8CgwUpA2kwJAfM+IwM63SqCiSotAcumk/D9xAICh3OZhPm2ahZctkcMeCocDHROZxLg

        Li8NXFk6QkCOJYeA35wdROCZigP3TOlIsGZkMe/E89eKvSRvWRxG/HBTJcu3lzeTvGtgB+8a

        1JL8pakVgk9fbWR5y3gNzRu+KyL5q+OFiHeULJJ83mUbzfc/sVN8lq6R5ifS/cSHe49JD8cL

        yjPJgub1t49LT7d39iO1qQKdL2yqJ7WoJw/pUZAEcwexrcRD6ZFUEsy1ErjeYybFoA3hbwvm

        kBisIlzz1y/sWkswZ0X4ln3PGjOBdsvlinWr5zg5HnnoX9eEcG/ihrFqQmQ5djc/DuQlEorb

        iwd6j66lZdxh/LjWR64x4nbip5031+Uktws/8poIcbsQPNrXxYgciqfGV2iRX8LOsor1rUlO

        i3C39iItmu7AHQYvJc7djfOvmBhx51ewoWhgw2gPrq6Zpa+gUOOWecatXsYtXqIoHnf5pwiR

        92Nz0xNG5H24/Lqf3OSfHePE//P7cd2DOxs+L+IMXcHGsDKEO39vR5uiqekZelN07eIoa0ay

        KhSWqlLHqRXqE5pTB6LkJ1QpCYJSmaiSxyUm/IjED3jrNhrNe7cFcRIUsU3moZQxwbQiOSkl

        oQW9HDAbs9zoRWGUKlElRITIoqSBsixekZIqaBJjNZ8rhaQW9IKEitglu278LCaYO6U4J5wV

        BLWg2awSkqAwLdJ1h+kbihZii79wGXuOedXPhA/fazv/1cclH3D1Lu7T+KfJZ/HS/diDDbPj

        ubYg+depF97q2x5tlO88Hlp56NK+aMOS+Yejvo6+hcaknpPbIj/pr+HeM+vnH7pS2PfjstyF

            8t2HYrZXDUyGgynywpeZr2a/saQ5MpdW5Bvodnozo2MiqKTTiqjXSE2S4j+oY7LtiA

0

Related:

Deliver Email

I need a solution

Problems Delivering email

LOG: MAIN
  cwd=/usr/local/cpanel/whostmgr/docroot 4 args: exim -v -M 1iXvli-0006PP-3o
delivering 1iXvli-0006PP-3o
LOG: MAIN
  Sender identification U=interpar D=interpartesdemexico.com S=licitaciones@interpartesdemexico.com
Connecting to cluster9.us.messagelabs.com [67.219.247.54]:25 from 158.69.242.81 ... connected
  SMTP<< 220 server-13.tower-426.messagelabs.com ESMTP
  SMTP>> EHLO s1
  SMTP(close)>>
LOG: MAIN
  H=cluster9.us.messagelabs.com [67.219.247.54]: Remote host closed connection in response to EHLO s1
Connecting to cluster9.us.messagelabs.com [67.219.246.102]:25 from 158.69.242.81 ... connected
  SMTP<< 220 server-11.tower-386.messagelabs.com ESMTP
  SMTP>> EHLO s1
  SMTP(close)>>
LOG: MAIN
  H=cluster9.us.messagelabs.com [67.219.246.102]: Remote host closed connection in response to EHLO s1
Connecting to cluster9.us.messagelabs.com [67.219.251.54]:25 from 158.69.242.81 ... connected
  SMTP<< 220 server-22.tower-366.messagelabs.com ESMTP
  SMTP>> EHLO s1
  SMTP(close)>>
LOG: MAIN
  H=cluster9.us.messagelabs.com [67.219.251.54]: Remote host closed connection in response to EHLO s1
Connecting to cluster9.us.messagelabs.com [67.219.250.198]:25 from 158.69.242.81 ... connected
  SMTP<< 220 server-6.tower-346.messagelabs.com ESMTP
  SMTP>> EHLO s1
  SMTP(close)>>
LOG: MAIN
  H=cluster9.us.messagelabs.com [67.219.250.198]: Remote host closed connection in response to EHLO s1
Connecting to cluster9.us.messagelabs.com [67.219.250.102]:25 from 158.69.242.81 ... connected
  SMTP<< 220 server-2.tower-326.messagelabs.com ESMTP
  SMTP>> EHLO s1
  SMTP(close)>>
LOG: MAIN
  H=cluster9.us.messagelabs.com [67.219.250.102]: Remote host closed connection in response to EHLO s1
Connecting to cluster9.us.messagelabs.com [67.219.246.198]:25 from 158.69.242.81 ... connected
  SMTP<< 220 server-22.tower-406.messagelabs.com ESMTP
  SMTP>> EHLO s1
  SMTP(close)>>
LOG: MAIN
  H=cluster9.us.messagelabs.com [67.219.246.198]: Remote host closed connection in response to EHLO s1
Connecting to cluster9a.us.messagelabs.com [3.222.201.247]:25 from 158.69.242.81 ... connected
  SMTP<< 220 mail555.messagelabs.com ESMTP Fri, 22 Nov 2019 03:47:29 +0000
  SMTP>> EHLO s1
  SMTP<< 250-mail555.messagelabs.com Hello ip-100-112-12-131.us-east-1.aws.symcld.net [100.112.12.131]
         250-SIZE 52428800
         250-8BITMIME
         250-PIPELINING
         250-CHUNKING
         250-PRDR
         250 HELP
  SMTP>> MAIL FROM:<licitaciones@interpartesdemexico.com> SIZE=105809
  SMTP>> RCPT TO:<humberto.villalobos@regalsprings.com>
  SMTP>> DATA
  SMTP<< 250 OK
  SMTP<< 421 Service Temporarily Unavailable
LOG: MAIN
  H=cluster9a.us.messagelabs.com [3.222.201.247]: SMTP error from remote mail server after RCPT TO:<humberto.villalobos@regalsprings.com>: 421 Service Temporarily Unavailable
  SMTP<< 503-All RCPT commands were rejected with this error:
         503-Service Temporarily Unavailable
         503 Valid RCPT command must precede DATA
  SMTP>> QUIT
  SMTP(close)>>
Connecting to cluster9a.us.messagelabs.com [34.237.164.170]:25 from 158.69.242.81 ... connected
  SMTP<< 220 mail555.messagelabs.com ESMTP Fri, 22 Nov 2019 03:47:29 +0000
  SMTP>> EHLO s1
  SMTP<< 250-mail555.messagelabs.com Hello ip-100-112-14-77.us-east-1.aws.symcld.net [100.112.14.77]
         250-SIZE 52428800
         250-8BITMIME
         250-PIPELINING
         250-CHUNKING
         250-PRDR
         250 HELP
  SMTP>> MAIL FROM:<licitaciones@interpartesdemexico.com> SIZE=105809
  SMTP>> RCPT TO:<humberto.villalobos@regalsprings.com>
  SMTP>> DATA
  SMTP<< 250 OK
  SMTP<< 421 Service Temporarily Unavailable
LOG: MAIN
  H=cluster9a.us.messagelabs.com [34.237.164.170]: SMTP error from remote mail server after RCPT TO:<humberto.villalobos@regalsprings.com>: 421 Service Temporarily Unavailable
  SMTP<< 503-All RCPT commands were rejected with this error:
         503-Service Temporarily Unavailable
         503 Valid RCPT command must precede DATA
  SMTP>> QUIT
  SMTP(close)>>
Connecting to cluster9a.us.messagelabs.com [52.73.243.182]:25 from 158.69.242.81 ... connected
  SMTP<< 220 mail555.messagelabs.com ESMTP Fri, 22 Nov 2019 03:47:29 +0000
  SMTP>> EHLO s1
  SMTP<< 250-mail555.messagelabs.com Hello ip-100-112-13-247.us-east-1.aws.symcld.net [100.112.13.247]
         250-SIZE 52428800
         250-8BITMIME
         250-PIPELINING
         250-CHUNKING
         250-PRDR
         250 HELP
  SMTP>> MAIL FROM:<licitaciones@interpartesdemexico.com> SIZE=105809
  SMTP>> RCPT TO:<humberto.villalobos@regalsprings.com>
  SMTP>> DATA
  SMTP<< 250 OK
  SMTP<< 421 Service Temporarily Unavailable
  SMTP<< 503-All RCPT commands were rejected with this error:
         503-Service Temporarily Unavailable
         503 Valid RCPT command must precede DATA
  SMTP>> QUIT
  SMTP(close)>>
LOG: MAIN
  == humberto.villalobos@regalsprings.com R=dkim_lookuphost T=dkim_remote_smtp defer (-44) H=cluster9a.us.messagelabs.com [52.73.243.182]: SMTP error from remote mail server after RCPT TO:<humberto.villalobos@regalsprings.com>: 421 Service Temporarily Unavailable
0

Related:

Issue attaching/sending file without extension through email

Each file has MIME type. eg: text file .txt will have text/plain.

MIME type “application/octet-stream” is used for all other file, that does not have specific file extension.

It will allow the file with unspecified extension.

allow “application/octet-stream”

Use following command to achieve this:

bind appfw profile <profile-name> -contentType “application/octet-stream”

save ns config

Related:

Remote Server returned ‘< #5.0.0 smtp; 550-Please turn on SMTP Authentication in your mail client.

I need a solution

We are not receiving email from a company that uses Message Labs and we use Proofpoint. We do not see the email hitting Proofpoint at all. Proofpoint does NOT require SMTP authentication.

Is this a Messagelab configruation issue?

Thank you!

Here is the header info, stripped of personal data:

Delivery has failed to these recipients or groups:
MyClient@myclient.com

A problem occurred while delivering this message to this email address. Try sending this message again. If the problem continues, please contact your helpdesk.

Diagnostic information for administrators:
Generating server: server-2.bemta.az-a.us-west-2.aws.symcld.net
MyClient@myclient.com
Remote Server returned ‘< #5.0.0 smtp; 550-Please turn on SMTP Authentication in your mail client. >’

Original message headers:
Return-Path: <TheSender@sender.com>
Received: from [xx.yy.zz.aa] (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256 bits))
    by server-2.bemta.az-a.us-west-2.aws.symcld.net id 1C/63-27934-3AB50BD5; Wed, 23 Oct 2019 13:54:43 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrOKsWRWlGSWpSXmKPExsUy45Bij+6i6A2
  xBkcvaVj83TiBzaJ1/zc2ByaPvkVv2QIYo1gz85LyKxJYMy7u3M5U8HUBY8W9L/+YGhhvz2Hs
  YuTiEBLYwSix7+gSti5GTiBnP6PEuY8yIDabgIPEpe37WEFsEQF3iXctTUxdjBwcwgKSEqvf+
  YKYIgJSEivv8UFUGEn86HzBBhJkki68FiTMK+Am0bPuAwuIzSggJvH91BomEJtZQFzi1p
  P5YLaEgIjEw4un2SBsUYmXj/+xQtgGEluX7mOBsBUldv75zwLRmyLx4NZ6Roj5ghInZz5hmcA
  oOAvJ2FlIymYhKYOIZ0lcnNPPDGHrSCzY/YkNwtaWWLbwNTOMfebAYyZUcQ4gO1mib3oyRFhe
  YtLP7UCtXED2MkaJjdMOQfUqSkzpfsi+gJFnFaNFUlFmekZJbmJmjq6hgYGuoaGRrqGRha6hq
  bleYpVuol5psW55anGJrpFeYnmxXnFlbnJOil5easkmRmDcphQ0zN3B+PbIa71DjJIcTEqivK
  mn1scK8SXlp1RmJBZnxBeV5qQWH2KU4eBQkuA1itwQKyRYlJqeWpGWmQNMITBpCQ4eJRHeGyB
  p3uKCxNzizHSI1ClGV44JL+cuYuY4eHQekPy4agmQ/A4m2zcCSSGWvPy8VClx3hMgzQIgzRml
  eXCjYenvEqOslDAvIwMDgxBPQWpRbmYJqvwrRnEORiVh3qgooCk8mXklcBe8AjqOCeg4Of71I
  MeVJCKkpBqYFGYYzhMUs5+t7xzGFLpItED86wSdllkNdjEG68PD4nNfpCtV/YlSVltx9v8bg/
  uZwp3aBrP6nuSd+nb2r85Fn2BJ/91P9z7+MfHBmbDSxBSDx5J8nfUsKzbZn/31R1psfv1XNc9
  aVg07ffUNr1MNp3lazf8UGMzv9vAn44+/Snu2vOe7zrp7z3Sjov9CleYTFKVYv5i2P59gPylE
  /pUdc01+pmqTR4q+XOaH8oT0GVK5dasnNijtZrkru/8c4+JdcWs+LPX4nGbobda4gX+e4Zw40
  2OnHhWoBV+9eJmLtY3Z7pDs7QOWK8T+pVjEFYr8C+/c8iXkame0PfvxdE3NOy/fT1i7Y8ccUZ
  bXM7qVWIozEg21mIuKEwHMKYbv+gMAAA==
X-Env-Sender: TheSender@sender.com
X-Msg-Ref: server-11.tower-331.messagelabs.com!1571838881!115107!1
X-Originating-IP: [111.222.333.444]
X-SYMC-ESS-Client-Auth: outbound-route-from=pass
X-StarScan-Received:
X-StarScan-Version: 9.43.12; banners=-,-,-
Received: (qmail 7940 invoked from network); 23 Oct 2019 13:54:42 -0000
Received: from ptr1.sender.com (HELO mail.sender.com) (111.222.333.444)
  by server-11.tower-331.messagelabs.com with ECDHE-RSA-AES256-SHA384 encrypted SMTP; 23 Oct 2019 13:54:42 -0000
Received: from SENDER-EXCH-03.SENDER.COM (111.222.333.113) by
 SENDER-EXCH-02.SENDER.com (111.222.333.112) with Microsoft SMTP Server (TLS) id
 15.0.1497.2; Wed, 23 Oct 2019 08:54:17 -0500
Received: from SENDER-EXCH-03.SENDER.COM ([fe80::49aa:4b74:6495:96d4]) by
 SENDER-EXCH-03.SENDER.com ([fe80::49aa:4b74:6495:96d4%13]) with mapi id
 15.00.1497.000; Wed, 23 Oct 2019 08:54:17 -0500
From: “Sender, Sender” <TheSender@sender.com>
To: Person 1<MyClient@myclient.com>, Person 2 <SNoel@myclient.com>
Subject: FW: Sales
Thread-Topic: Sales
Thread-Index: AdWJqEYIueyQsz8ypTwSTmmWe97H46wAAQ94g
Date: Wed, 23 Oct 2019 13:54:16 +0000
Message-ID: <363823bb7f0b4b0a8d0205f8cfa2287f@SENDER-EXCH-03.SENDER.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.1.10.100]
Content-Type: text/plain
MIME-Version: 1.0

0

Related:

421 Service Temporarily Unavailable

I do not need a solution (just sharing information)

Good day

My client always send message from  programacion.pampilla @ cargotransportperu.com to repsolpampilla @ repsol.com.

Today when cargotransportperu.com send mails to repsol.com receive an error message this message:

== repsolpampilla@repsol.com R=lookuphost T=remote_smtp defer (-44) H=cluster1a.eu.messagelabs.com [3.123.158.38]: SMTP error from remote mail server after RCPT TO:<repsolpampilla@repsol.com>: 421 Service Temporarily Unavailable

Thanks in advance for your help

Here full header:

LOG: MAIN
  cwd=/usr/local/cpanel/whostmgr/docroot 4 args: /usr/sbin/exim -v -M 1iK1A0-003783-Tu
delivering 1iK1A0-003783-Tu
LOG: MAIN
  Sender identification U=cargotra D=cargotransportperu.com S=programacion.pampilla@cargotransportperu.com
Connecting to cluster1.eu.messagelabs.com [85.158.142.97]:25 from 184.154.61.59 … connected
  SMTP<< 220 server-20.tower-222.messagelabs.com ESMTP
  SMTP>> EHLO cargotransportperu.com
  SMTP<< 250-server-20.tower-222.messagelabs.com
         250-STARTTLS
         250-PIPELINING
         250 8BITMIME
  SMTP>> STARTTLS
  SMTP<< 220 ready for TLS
  SMTP>> EHLO cargotransportperu.com
  SMTP<< 250-server-20.tower-222.messagelabs.com
         250-PIPELINING
         250 8BITMIME
  SMTP>> MAIL FROM:<programacion.pampilla@cargotransportperu.com>
  SMTP>> RCPT TO:<repsolpampilla@repsol.com>
  SMTP>> DATA
  SMTP<< 250 OK
  SMTP<< 450-Requested action aborted [9] 222-20, please visit
         450-http://www.symanteccloud.com/troubleshooting for more
         450 details about this error message.
LOG: MAIN
  H=cluster1.eu.messagelabs.com [85.158.142.97]: SMTP error from remote mail server after RCPT TO:<repsolpampilla@repsol.com>: 450-Requested action aborted [9] 222-20, please visitn450-http://www.symanteccloud.com/troubleshooting for moren450 details about this error message.
  SMTP<< 503 RCPT first (#5.5.1)
  SMTP>> QUIT
  SMTP(close)>>
Connecting to cluster1.eu.messagelabs.com [85.158.142.196]:25 from 184.154.61.59 … connected
  SMTP<< 220 server-13.tower-241.messagelabs.com ESMTP
  SMTP>> EHLO cargotransportperu.com
  SMTP<< 250-server-13.tower-241.messagelabs.com
         250-STARTTLS
         250-PIPELINING
         250 8BITMIME
  SMTP>> STARTTLS
  SMTP<< 220 ready for TLS
  SMTP>> EHLO cargotransportperu.com
  SMTP<< 250-server-13.tower-241.messagelabs.com
         250-PIPELINING
         250 8BITMIME
  SMTP>> MAIL FROM:<programacion.pampilla@cargotransportperu.com>
  SMTP>> RCPT TO:<repsolpampilla@repsol.com>
  SMTP>> DATA
  SMTP<< 250 OK
  SMTP<< 450-Requested action aborted [9] 241-13, please visit
         450-http://www.symanteccloud.com/troubleshooting for more
         450 details about this error message.
LOG: MAIN
  H=cluster1.eu.messagelabs.com [85.158.142.196]: SMTP error from remote mail server after RCPT TO:<repsolpampilla@repsol.com>: 450-Requested action aborted [9] 241-13, please visitn450-http://www.symanteccloud.com/troubleshooting for moren450 details about this error message.
  SMTP<< 503 RCPT first (#5.5.1)
  SMTP>> QUIT
  SMTP(close)>>
Connecting to cluster1a.eu.messagelabs.com [52.58.21.128]:25 from 184.154.61.59 … connected
  SMTP<< 220 mail555.messagelabs.com ESMTP Mon, 14 Oct 2019 16:05:38 +0000
  SMTP>> EHLO cargotransportperu.com
  SMTP<< 250-mail555.messagelabs.com Hello ip-100-113-12-211.eu-central-1.aws.symcld.net [100.113.12.211]
         250-SIZE 52428800
         250-8BITMIME
         250-PIPELINING
         250-CHUNKING
         250-PRDR
         250 HELP
  SMTP>> MAIL FROM:<programacion.pampilla@cargotransportperu.com> SIZE=3602907
  SMTP>> RCPT TO:<repsolpampilla@repsol.com>
  SMTP>> DATA
  SMTP<< 250 OK
  SMTP<< 421 Service Temporarily Unavailable
LOG: MAIN
  H=cluster1a.eu.messagelabs.com [52.58.21.128]: SMTP error from remote mail server after RCPT TO:<repsolpampilla@repsol.com>: 421 Service Temporarily Unavailable
  SMTP<< 503-All RCPT commands were rejected with this error:
         503-Service Temporarily Unavailable
         503 Valid RCPT command must precede DATA
  SMTP>> QUIT
  SMTP(close)>>
Connecting to cluster1a.eu.messagelabs.com [3.123.158.38]:25 from 184.154.61.59 … connected
  SMTP<< 220 mail555.messagelabs.com ESMTP Mon, 14 Oct 2019 16:05:38 +0000
  SMTP>> EHLO cargotransportperu.com
  SMTP<< 250-mail555.messagelabs.com Hello ip-100-113-13-49.eu-central-1.aws.symcld.net [100.113.13.49]
         250-SIZE 52428800
         250-8BITMIME
         250-PIPELINING
         250-CHUNKING
         250-PRDR
         250 HELP
  SMTP>> MAIL FROM:<programacion.pampilla@cargotransportperu.com> SIZE=3602907
  SMTP>> RCPT TO:<repsolpampilla@repsol.com>
  SMTP>> DATA
  SMTP<< 250 OK
  SMTP<< 421 Service Temporarily Unavailable
  SMTP<< 503-All RCPT commands were rejected with this error:
         503-Service Temporarily Unavailable
         503 Valid RCPT command must precede DATA
  SMTP>> QUIT
  SMTP(close)>>
LOG: MAIN
  == repsolpampilla@repsol.com R=lookuphost T=remote_smtp defer (-44) H=cluster1a.eu.messagelabs.com [3.123.158.38]: SMTP error from remote mail server after RCPT TO:<repsolpampilla@repsol.com>: 421 Service Temporarily Unavailable
 

0

Related:

Unable to email to certain email addresses

I need a solution

Hi,

One of my users encountered the below error when she sent an email to a client. There are no attachments in the email. The receiptient’s email address has been whitelisted on our end too but we still have problems sending emails to them. I cannot so sure about this Private/Loopback Address error. Can anyone advise?

Delivery has failed to these recipients or groups:

zengyj@fineland.com.cn
A problem occurred during the delivery of this message. Please try to resend the message later. If the problem continues, contact your helpdesk.

Diagnostic information for administrators:

Generating server: server-5.bemta.az-c.us-east-1.aws.symcld.net

zengyj@fineland.com.cn
#< #5.4.6 smtp; 551 5.4.6 [internal] Private/Loopback Address> #SMTP#

Original message headers:

Return-Path: <clara.poa@shooklin.com>

Received: from [67.219.246.202] (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256 bits))

        by server-5.bemta.az-c.us-east-1.aws.symcld.net id 4D/4B-19274-709EA9C5; Wed, 27 Mar 2019 03:07:51 +0000

X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrPJsWRWlGSWpSXmKPExsVyum7CPV32l7N

  iDD7M5LdY2r2N0WL/0UtsFv+fS1p0zVnDZrF7wWVmB1aPf6eesXice/KYyeP6zVVsAcxRrJl5

  SfkVCawZ3yauYS3o/sJdcfnfb6YGxgf3ubsYuTiEBPYySvzf2MjSxcjJwSagITH9dw+YLSJgL

  HFo10RmEJtZ4DaTxJobMl2MHBzCAoESt2aFQ5SESTxsWM8EYetJ7Hq6H8xmEVCVaNrYzw5i8w

  r4Scw5PgdsDKOAmMT3U2uYIEaKS9x6Mh/MlhAQkXh48TQbhC0q8fLxP1YIW0ni0+l7zCB3Mgt

  0Mkp8/viSDWKooMTJmU9YJjAKzEIyaxayullI6mYB3c0skCdxZpY9hKkpsX6XPkSrosSU7ofs

  ELaGROucueyY4roS0yccYYKJz17+ihFi1WJGiUU3X7JAJHQk5hzexIKpWUdi5s4bcPHjR68yw

  TWfnLafEaao/c1JZmTNCxiFVjGaJhVlpmeU5CZm5ugaGhjoGhoa6ZrqGpvrJVbpJuuVFuumJh

  aX6BrqJZYX6xVX5ibnpOjlpZZsYgQmmJQCVtUdjOu70g8xSnIwKYnyfrg0K0aILyk/pTIjsTg

  jvqg0J7X4EKMMB4eSBO/PZ0A5waLU9NSKtMwcYKqDSUtw8CiJ8GqApHmLCxJzizPTIVKnGC05

  Dix6OJeZo+MViNzz6/FcZiGWvPy8VClxXsXnQA0CIA0ZpXlw42Dp+BKjrJQwLyMDA4MQT0FqU

  W5mCar8K0ZxDkYlYd5tIGt5MvNK4La+AjqICeggya7pIAeVJCKkpBoYuZjkT+Vvbft2RaP/5S

  fvNKtp0w/ZH5fYciLN5ojOdQ3uFzrHGl8VbPyXxbO8TJ0vMpqtlF2hqtT6udKNc9oljll72f/

  6/3wqFJ+zr3Lzssi35U+vBmfo/nC+nR9YqenvP9Gt76Ff3p/dfHvVIpdtbJj09bzVZKaSh7MP

  Xjaem830tsLezahbiaU4I9FQi7moOBEA9PJHuMIDAAA=

X-Env-Sender: clara.poa@shooklin.com

X-Msg-Ref: server-16.tower-410.messagelabs.com!1553656066!5280080!1

X-Originating-IP: [203.126.144.222]

X-SYMC-ESS-Client-Auth: outbound-route-from=pass

X-StarScan-Received:

X-StarScan-Version: 9.31.5; banners=shooklin.com,-,-

Received: (qmail 25395 invoked from network); 27 Mar 2019 03:07:49 -0000

Received: from unknown (HELO SLBMAIL.shooklin.com.sg) (203.126.144.222)

  by server-16.tower-410.messagelabs.com with DHE-RSA-AES256-GCM-SHA384 encrypted SMTP; 27 Mar 2019 03:07:49 -0000

Received: from SLBMAIL.shooklin.com.sg ([fe80::3d42:ed3:fe8e:8971]) by

SLBMAIL.shooklin.com.sg ([fe80::3d42:ed3:fe8e:8971%24]) with mapi id

14.03.0439.000; Wed, 27 Mar 2019 11:07:45 +0800

From: Clara Poa <clara.poa@shooklin.com>

To: =?utf-8?B?6buO5qGC6LSk?= <ligx@fineland.com.cn>

CC: “scarlet.feng@sidley.com” <scarlet.feng@sidley.com>, Melissa Huang

        <melissa.huang@shooklin.com>, “GFDCM@gfgroup.com.hk” <GFDCM@gfgroup.com.hk>,

        Gan Cheng Kai <chengkai.gan@shooklin.com>, “SidleyProjectOrient@sidley.com”

        <SidleyProjectOrient@sidley.com>, =?utf-8?B?5pu+546J5ZCb?=

        <zengyj@fineland.com.cn>, Clara Poa <clara.poa@shooklin.com>

Subject: =?utf-8?B?UHJvamVjdCBPcmllbnQg4oCTIFNHWCBGZWVzIOaWsOS6pOaJgOi0ueeUqA==?=

Thread-Topic: =?utf-8?B?UHJvamVjdCBPcmllbnQg4oCTIFNHWCBGZWVzIOaWsOS6pOaJgOi0ueeUqA==?=

Thread-Index: AdTkSjWg9RAcJNO7TdSUSrP06uTBtg==

Date: Wed, 27 Mar 2019 03:07:44 +0000

Message-ID: <62B77E66EF46774E9166D16CA83ECB6618182A30@SLBMAIL.shooklin.com.sg>

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-TNEF-Correlator:

x-originating-ip: [192.168.16.160]

Content-Type: text/plain

MIME-Version: 1.0

Thanks.

0

Related:

Puremessage for Unix: New policy tests for MIME spec, preamble and epilogue length

This article discusses the new policy tests that were added to PMX 6.4.1. The policy tests check if a message meets MIME (Multipurpose Internet Mail Extension) type specifications, and can check the preamble and epilogue length of a message.

The following sections are covered:

Applies to the following Sophos products and versions

PureMessage for Unix

pmx_invalid_mime_spec

A new policy test, pmx_invalid_mime_spec will detect if a message has content that does not meet MIME specifications. It only detects invalid specification of attributes in the Content-Type header.

Syntax:pmx_invalid_mime_spec

Use: Some multi-part spam messages specify an invalid boundary string to prevent attachments detection. For example boundary==abc. Although this boundary is illegal some MUAs (Mail Utility Agent) display the message properly. This test can be used to detect such mails. No legitimate message will have such boundaries specified.

pmx_preamble_length and pmx_epilogue_length

Two new policy tests pmx_preamble_length and pmx_epilogue_length can be used to detect the presence of a preamble and/or epilogue parts. Not all preambles are harmful, some message agents add This is a MIME formatted message or other kind of text in the preamble area. These types of preambles can be bypassed with a test like the one shown below.

if pmx_preamble_length :over 35.

The preamble and epilogue areas can be exploited by spammers to hide spam content from the MIME parser. With these new tests, a user can check if a message contains any text in the preamble or epilogue area.

Example test:

if pmx_preamble_length :over 35 {

pmx_quarantine "Preamble_beyond_legitimate_length";

}

if pmx_epilogue_length :over 0 {

pmx_quarantine "Epilogue_present";

}

  • The test pmx_preamble_length will return number of characters present in the preamble part.
  • The test pmx_epilogue_length will return number of characters present in the epilogue part.

pmx_preamble_length

Syntax:pmx_preamble_length [NUMERIC-COMP] <limit: number>

Use: Returns true if the number of characters in the preamble area of a multipart MIME message has over or under the number given.

Parameters:[NUMERIC-COMP] <limit: number> - see "NUMERIC-COMP" section

pmx_epilogue_length

Syntax:pmx_epilogue_length [NUMERIC-COMP] <limit: number>

Use: Returns true if the number of characters in the epilogue area of a multipart MIME message has over or under the number given.

Parameters:[NUMERIC-COMP] <limit: number> - see "NUMERIC-COMP" section

If you’ve spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article.

This is invaluable to us to ensure that we continually strive to give our customers the best information possible.

Related:

Returned ‘400 4.4.7 Message delayed’ from MessageLabs.com

I need a solution

When we send emails to many customers who are using Symantec’s service, we receive refunds, such as

供管理员使用的诊断信息:

生成服务器: CDSSRVDCEX02.hkdc.cds-net.com
接收服务器: cluster5a.eu.messagelabs.com (18.194.106.207)
 

blau@plumproducts.com
Remote Server at cluster5a.eu.messagelabs.com (18.194.106.207) returned ‘400 4.4.7 Message delayed’
1/24/2019 10:45:09 AM – Remote Server at cluster5a.eu.messagelabs.com (18.194.106.207) returned ‘451 4.4.0 Primary target IP address responded with: “421 4.4.1 Connection timed out.” Attempted failover to alternate host, but that did not succeed. Either there are no alternate hosts, or delivery failed to all alternate hosts. The last endpoint attempted was 18.194.106.207:25’

原始邮件头:

Received: from CDSSRVDCEX01.hkdc.cds-net.com (10.1.1.33) by
 CDSSRVDCEX02.hkdc.cds-net.com (10.1.1.64) with Microsoft SMTP Server (TLS) id
 15.0.1367.3; Thu, 24 Jan 2019 14:52:39 +0800
Received: from CDSSRVDCEX01.hkdc.cds-net.com ([fe80::41b3:7f32:d22f:6b81]) by
 CDSSRVDCEX01.hkdc.cds-net.com ([fe80::41b3:7f32:d22f:6b81%16]) with mapi id
 15.00.1367.000; Thu, 24 Jan 2019 14:52:38 +0800
From: April Shao <aprilshao@cdsshanghai.com.cn>
To: “op@fanfeitrans.com” <op@fanfeitrans.com>
CC: “blau@plumproducts.com” <blau@plumproducts.com>
Subject: CTCVANL06138SH0
Thread-Topic: CTCVANL06138SH0
Thread-Index: AdSzsUJdsk09dD0MRRSTWf5Qunf96A==
Date: Thu, 24 Jan 2019 06:52:38 +0000
Message-ID: <60de1864092a42339ddefd0e1bf213d3@CDSSRVDCEX01.hkdc.cds-net.com>
Accept-Language: zh-CN, en-US
Content-Language: zh-CN
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [221.133.242.163]
Content-Type: multipart/related;
       boundary=”_004_60de1864092a42339ddefd0e1bf213d3CDSSRVDCEX01hkdccdsnetc_”;
       type=”multipart/alternative”
MIME-Version: 1.0
 

We try to solve this problem with smart hosts, but it can’t solve all the problems in the end.

Our domain:cds.com.hk,cdsshanghai.com.cn, cdsningbo.com,cdsqingdao.com,cdsxiamen.com

Our exchange servers IP : 175.45.36.68-70

0

Related:

email block

I need a solution

My client cannot send email to message lab addresses. We do not send bulk mail and are not listed on any blacklist including Symantec.

Returned emails have a header like this:

Subject: dmcsmtp.dansmanagement.com Mail delivery failed : returning message to sender

This message was created automatically by the SMTP relay on dmcsmtp.dansmanagement.com.

 

A message that you sent could not be delivered to all of its recipients.

The following address(es) failed:

  coloniallifesales.com

    SMTP error from remote mail server after RCPT TO:@coloniallifesales.com>:

    host cluster9.us.messagelabs.com [52.73.243.182]:

    421 Service Temporarily Unavailable: retry timeout exceeded

—— This is a copy of the message, including all the headers. ——

Return-path: <aaraujo@dansmanagement.com>

Received: from [200.0.0.54] (port=40176 helo=dmcsmtp.dansmanagement.com)

                by dmcsmtp.dansmanagement.com with esmtp (Exim 4.82_1-5b7a7c0-XX)

                (envelope-from <aaraujo@dansmanagement.com>)

                id 1gUZwM-00008V-2X

                for <message lab client>; Wed, 05 Dec 2018 11:22:22 -0500

Received: from dmc-Mail2010.dmcdomain.local ([fe80::9c64:df94:9c18:229c]) by  dmc-Mail2010.dmcdomain.local ([fe80::9c64:df94:9c18:229c%10]) with mapi id  14.03.0415.000; Wed, 5 Dec 2018 11:22:22 -0500

X-CTCH-RefID: str=0001.0A020205.5C07FB3E.00DD,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0

From: Abigail Araujo <aaraujo@dansmanagement.com>

To: <message lab client>

Subject: Test

Thread-Topic: Test

Thread-Index: AdSMtqTriyykCgvwQCKUl+Jmuj+kSQ==

Date: Wed, 5 Dec 2018 16:22:21 +0000

Message-ID: <3C7074C5333CC54287CD83E334D3105709CD65C7@dmc-Mail2010.dmcdomain.local>

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach: yes

X-MS-TNEF-Correlator:

x-originating-ip: [200.0.0.152]

Content-Type: multipart/related;

                boundary=”_004_3C7074C5333CC54287CD83E334D3105709CD65C7dmcMail2010dmcd_”;

                type=”multipart/alternative”

MIME-Version: 1.0

–_004_3C7074C5333CC54287CD83E334D3105709CD65C7dmcMail2010dmcd_

Content-Type: multipart/alternative;

                boundary=”_000_3C7074C5333CC54287CD83E334D3105709CD65C7dmcMail2010dmcd_”

–_000_3C7074C5333CC54287CD83E334D3105709CD65C7dmcMail2010dmcd_

Content-Type: text/plain; charset=”us-ascii”

Content-Transfer-Encoding: quoted-printable

Our email filter shows a smtp spool like this:

2018-12-09 15:01:18 cluster9.us.messagelabs.com [67.219.246.102]:25 Connection timed out
2018-12-09 15:03:25 cluster9.us.messagelabs.com [67.219.247.54]:25 Connection timed out
2018-12-09 15:05:33 cluster9.us.messagelabs.com [67.219.246.198]:25 Connection timed out
2018-12-09 15:07:40 cluster9.us.messagelabs.com [67.219.251.54]:25 Connection timed out
2018-12-09 15:09:47 cluster9.us.messagelabs.com [67.219.250.198]:25 Connection timed out
2018-12-09 15:09:47 SMTP error from remote mail server after RCPT TO:<postmaster@coloniallifesales.com>: host cluster9a.us.messagelabs.com [52.206.215.254]: 421 Service Temporarily Unavailable
2018-12-09 15:09:47 postmaster@coloniallifesales.com R=dnslookup T=remote_smtp defer (-44): SMTP error from remote mail server after RCPT TO:<postmaster@coloniallifesales.com>: host cluster9a.us.messagelabs.com [52.206.215.254]: 421 Service Temporarily Unavailable

This is my 2nd post and I have emailed the investigation email address twice. So far I have no replies

0

Related:

Verdict “unscannble due to malformed MIME”

I need a solution

Dears, good morning,
My SMG version 10.6.5-1, had a strange behavior, were normally occurring exchanges of messages between two people, when suddenly in one of them he classified the message as “unscannable for malware and content filtering” verdict “unscannble due to malformed MIME” , what could have happened and how can I circumvent this so as not to occur?
Thankful.

0

Related:

  • No Related Posts