none
Ignored X-OriginatorOrg header value 'domain name' because session capabilities do not allow it RRS feed

  • Question

  • I am trying to figure out why this e-mail is getting rejected.

    Any help would be appreciated: 


    2019-04-15T14:55:11.125Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,0,SERVERIP:25,208.117.55.132:42396,+,,
    2019-04-15T14:55:11.125Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,1,SERVERIP:25,208.117.55.132:42396,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
    2019-04-15T14:55:11.125Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,2,SERVERIP:25,208.117.55.132:42396,>,"220 SERVERNAME.corp.userdomain Microsoft ESMTP MAIL Service ready at Mon, 15 Apr 2019 10:55:11 -0400",
    2019-04-15T14:55:11.250Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,3,SERVERIP:25,208.117.55.132:42396,<,EHLO o1.f.az.sendgrid.net,
    2019-04-15T14:55:11.250Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,4,SERVERIP:25,208.117.55.132:42396,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
    2019-04-15T14:55:11.250Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,5,SERVERIP:25,208.117.55.132:42396,>,250-SERVERNAME.corp.userdomain Hello [208.117.55.132],
    2019-04-15T14:55:11.250Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,6,SERVERIP:25,208.117.55.132:42396,>,250-SIZE 62914560,
    2019-04-15T14:55:11.250Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,7,SERVERIP:25,208.117.55.132:42396,>,250-PIPELINING,
    2019-04-15T14:55:11.250Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,8,SERVERIP:25,208.117.55.132:42396,>,250-DSN,
    2019-04-15T14:55:11.250Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,9,SERVERIP:25,208.117.55.132:42396,>,250-ENHANCEDSTATUSCODES,
    2019-04-15T14:55:11.250Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,10,SERVERIP:25,208.117.55.132:42396,>,250-STARTTLS,
    2019-04-15T14:55:11.250Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,11,SERVERIP:25,208.117.55.132:42396,>,250-X-ANONYMOUSTLS,
    2019-04-15T14:55:11.250Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,12,SERVERIP:25,208.117.55.132:42396,>,250-AUTH NTLM,
    2019-04-15T14:55:11.250Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,13,SERVERIP:25,208.117.55.132:42396,>,250-X-EXPS GSSAPI NTLM,
    2019-04-15T14:55:11.250Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,14,SERVERIP:25,208.117.55.132:42396,>,250-8BITMIME,
    2019-04-15T14:55:11.250Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,15,SERVERIP:25,208.117.55.132:42396,>,250-BINARYMIME,
    2019-04-15T14:55:11.250Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,16,SERVERIP:25,208.117.55.132:42396,>,250-CHUNKING,
    2019-04-15T14:55:11.250Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,17,SERVERIP:25,208.117.55.132:42396,>,250 XRDST,
    2019-04-15T14:55:11.360Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,18,SERVERIP:25,208.117.55.132:42396,<,MAIL FROM:<bounces+5636024-4d17-kelley=userdomain@sendgrid.net>,
    2019-04-15T14:55:11.360Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,19,SERVERIP:25,208.117.55.132:42396,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
    2019-04-15T14:55:11.360Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,20,SERVERIP:25,208.117.55.132:42396,*,08D6A0AAD45874BD;2019-04-15T14:55:11.125Z;1,receiving message
    2019-04-15T14:55:11.360Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,21,SERVERIP:25,208.117.55.132:42396,>,250 2.1.0 Sender OK,
    2019-04-15T14:55:11.454Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,22,SERVERIP:25,208.117.55.132:42396,<,RCPT TO:<kelley@userdomain>,
    2019-04-15T14:55:11.579Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BD,23,SERVERIP:25,208.117.55.132:42396,>,250 2.1.5 Recipient OK,
    2019-04-15T14:55:13.078Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BB,24,SERVERIP:25,148.163.135.239:55120,<,DATA,
    2019-04-15T14:55:13.078Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BB,25,SERVERIP:25,148.163.135.239:55120,>,354 Start mail input; end with <CRLF>.<CRLF>,
    2019-04-15T14:55:13.078Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BB,26,SERVERIP:25,148.163.135.239:55120,*,,Ignored X-OriginatorOrg header value 'silvertonmortgage.com' because session capabilities do not allow it
    2019-04-15T14:55:13.094Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BB,27,SERVERIP:25,148.163.135.239:55120,*,,Proxy destination(s) obtained from OnProxyInboundMessage event
    2019-04-15T14:55:13.266Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BB,28,SERVERIP:25,148.163.135.239:55120,>,"250 2.6.0 <SN6PR05MB49748EF7EF39F5FABB72AF7CBE2B0@SN6PR05MB4974.namprd05.prod.outlook.com> [InternalId=121105192845808, Hostname=SERVERNAME.corp.userdomain] Queued mail for delivery",
    2019-04-15T14:55:13.328Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BB,29,SERVERIP:25,148.163.135.239:55120,<,QUIT ,
    2019-04-15T14:55:13.328Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BB,30,SERVERIP:25,148.163.135.239:55120,>,221 2.0.0 Service closing transmission channel,
    2019-04-15T14:55:13.328Z,SERVERNAME\Default Frontend SERVERNAME,08D6A0AAD45874BB,31,SERVERIP:25,148.163.135.239:55120,-,,Local

    Monday, April 15, 2019 8:25 PM

All replies

  • What is the NDR in the message the sender gets back say?
    Monday, April 15, 2019 9:04 PM
  • Hi Jaime,


    1.Where's the message send from? Internal or external?

    2.Does this affect all messages or just certain ones?

     

    The error looks like it is related to the firewall. Do you have any ESMTP on the firewall enabled? Or any 3rd party anti-spam, add-ins or software installed on the front-end? If so, please disable esmtp or add-ins for a while and monitor the problem reproduces or not. 

     

    Would you please provide more information about this issue? It is suggested that checking the message tracking log based on the subject of the email.


    Regards,

    Kelvin Deng


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    Tuesday, April 16, 2019 6:53 AM
  • The message is sent from an automated service, so I don't have the NDR sender gets.
    Tuesday, April 16, 2019 11:58 AM
  • The message is sent from an automated service, so I don't have the NDR sender gets.

    well, what the logs you provided dont show the issue

    In fact, from those, it appears to have been delivered

    <SN6PR05MB49748EF7EF39F5FABB72AF7CBE2B0@SN6PR05MB4974.namprd05.prod.outlook.com> [InternalId=121105192845808, Hostname=SERVERNAME.corp.userdomain] Queued mail for delivery",
    2019-04-15T14:55:13.328Z,SERVERNAME\Default Frontend 

    Tuesday, April 16, 2019 12:15 PM
  • 1.- E-mail is external.

    2.- it only affects some e-mails. currently this is the only one we have been able to identify.

    antivirus is not activated.

    Not sure how to disable esmtp.

    Tuesday, April 16, 2019 7:24 PM
  • Hi Jaime,

     

    If you deploy 3rd party firewalls or network devices, since different brands firewalls have different operations, you can contact the provider for disabling esmtp.  For example, the link below is disabling ESMTP Inspection on CISCO ASA.

     

    https://www.barracuda.com/support/knowledgebase/50160000000IyefAAC

    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

    Regards,

    Kelvin Deng


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    Wednesday, April 17, 2019 2:52 AM
  • Hi Jamie,
     
    I am writing here to confirm with you how thing going now?
     
    If the above suggestion helps, please be free to mark it as an answer for helping more people.
     
    Regards,
    Kelvin Deng

    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.


    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.

    Monday, April 22, 2019 10:03 AM