Question : Rejection from parts of Europe

Hi All,

Stating not long ago my people starting getting rejections notices from a few estern European countries. I looked it up on Microsoft and read some of their articles but they don't seem to apply. The countries rejecting (and not all e-mail) are .ru, ua, yu, ke. Microsoft says polices are the problem but I have no polices set. In looking in the logs it says the client host has rejected it and ref KB928123.

Here is the rejection slip from one
Delivery has failed to these recipients or distribution lists:

'[email protected]'
Your message wasn't delivered because of security policies. Microsoft Exchange will not try to redeliver this message for you. Please provide the following diagnostic text to your system administrator.

The following organization rejected your message: Requested.

  _____  

Sent by Microsoft Exchange Server 2007
Diagnostic information for administrators:
Generating server: EXCHANGE.satake-usa.com
[email protected]
Requested #553 5.7.1 .windstream.net[67.141.114.100]>: Client host rejected: Cannot receive post from this address ##
Original message headers:
Received: from EXCHANGE.satake-usa.com ([67.141.114.100]) by
 EXCHANGE.satake-usa.com ([67.141.114.100]) with mapi; Thu, 7 Aug 2008
 10:45:57 -0500
From: "Bruess, Don"
To: "'[email protected]u'" >
Disposition-Notification-To: "Bruess, Don"
Date: Thu, 7 Aug 2008 10:45:57 -0500
Subject: e-mail test
Thread-Topic: e-mail test
Thread-Index: Acj4pK8/d8ncDepeSDCaP7IQcPZKzQ==
Message-ID: <1EB494CD3A4BD5489F6C87504E4EBF4715841AFFC4@EXCHANGE.satake-usa.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: multipart/alternative;
      boundary="_000_1EB494CD3A4BD5489F6C87504E4EBF4715841AFFC4EXCHANGEsatak_"
MIME-Version: 1.0



Any help or suggestions would be great.

Thanks,
Don

Answer : Rejection from parts of Europe

Hi Don,

You need to fix your Reverse Lookup entries. At the moment your server looks to be sending out as exchange.satake-usa.com.

A lot of remote mail systems will perform a few basic checks (this won't be limited to the european region) to see if your mail server looks like an official mail server rather than a virus on someones cable connection.

Unfortunately at the moment you look rather like someone operating on a cable connection because when they lookup your IP in DNS (as part of these checks) they get this back:

Name:    h100.114.141.67.static.ip.windstream.net
Address:  67.141.114.100

We need that to show this:

Name:    exchange.satake-usa.com
Address:  67.141.114.100

Reverse Lookups are the responsibility of your ISP (windstream.net?). It's not something you will have direct control of, so you'd need to ask your ISP to do this for you.

It should be a common request for even a small ISP so it shouldn't be a problem. You should just need to ask them to add a PTR record for the IP above, pointing to the name.

HTH

Chris