Incoming mail rejected due to Sender-ID policy
-
Tuesday, July 03, 2012 2:50 PM
We've got one sender whose email is always getting blocked in our Exchange 2010 SP2 server with
550 5.7.1 Rejected due to Sende-IC policy for sender user@usersdomain.com (state 17)
Initially I added the sender's domain to the BypassedSenderDomains using Set-SenderIdConfig however they are still getting blocked.
Does anyone know what 'State 17' is? Maybe there's a clue there?
Orange County District Attorney
All Replies
-
Wednesday, July 04, 2012 2:53 AMOn Tue, 3 Jul 2012 14:50:24 +0000, Sandy Wood wrote:>We've got one sender whose email is always getting blocked in our Exchange 2010 SP2 server with>>550 5.7.1 Rejected due to Sende-IC policy for sender user@usersdomain.com (state 17)>>Initially I added the sender's domain to the BypassedSenderDomains using Set-SenderIdConfig however they are still getting blocked.>>Does anyone know what 'State 17' is? Maybe there's a clue there?That doesn't look like something an Exchange server would dend in astatus message. Check your SMTP receive protcol log and see what yourserver's sending as a status message.---Rich MatheisenMCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP -
Wednesday, July 04, 2012 7:21 AMModerator
Agree with Rich. I guess the sender's mail does not hit your Exchange 2010 server at all. Maybe the message is rejected by your ISP directly.
Please check the SMTP receive protocol log as Rich said.
Please also ask the sender to provide full NDR if possible.
Please let the sender to do an Outbound SMTP E-Mail via https://www.testexchangeconnectivity.com/
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.
Frank Wang
TechNet Community Support
- Edited by Frank.WangModerator Wednesday, July 04, 2012 7:22 AM
-
Thursday, July 05, 2012 3:00 PM
Thanks for the information. I'll have the users try again and watch my SMTP logs.
Orange County District Attorney
-
Friday, July 06, 2012 4:15 PM
Just wanted to update my issue. I turned on Protocol logging on my Hub Transports and had the user try to send another email. The email again came back with the same NDR
Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the recipient
domain. We recommend contacting the other email provider for further
information about the cause of this error. The error that the other server
returned was: 550 550 5.7.1 Rejected due to Sender-ID policy for sender
user@userdomain.com (state 17).I couldn't find any trace of this user in the logs so I'm guessing that the message is coming from somewhere before us.
Orange County District Attorney

