Unable to deliver outbound mail to some domains

book

Article ID: 156795

calendar_today

Updated On:

Products

Messaging Gateway

Issue/Introduction

Messaging Gateway (SMG) cannot deliver messages to some domains. Message Audit Logs indicate that messages are rejected with a 550 reponse code by the destination mail server and the message is discarded from the delivery queue.
 

"550 5.5.0 invalid ehlo/helo host.example.com" in message audit log.

Cause

Some mail servers perform DNS checks to validate the connection including the following:

  • The connecing IP has a PTR record in the DNS
  • A lookup of the hostname in the PTR record returns the connecting IP (forward and reverse lookups match)
  • The hostname in the EHLO has a valid A record or MX record in the DNS
  • The domain part of the MAIL FROM has either an A record or MX record in the DNS

Resolution

Symantec recommends that when using SMG for outbound delivery the SMG hostname, A records, and PTR records all provide consistant identification for the SMG system.

When sending and receiving messages this is the name that Symantec Brightmail Gateway will use to greet other MTAs.

To change the MTA host name:

  1. Login to the Control Center
  2. Click the Administration Tab
  3. Navigate to -> Hosts -> Configuration
  4. Click on the scanner(s) having the problem to open its configuration
  5. Click the SMTP Tab -> Scroll down and click on Advanced Settings
  6. Change the "MTA host name" to match the MX record found in the nslookup. (in this example it will be: "mail.example.com")
  7. Click Continue
  8. Click Save

Once the changes are applied, retry the mail delivery:

  1. Navigate to Status -> SMTP -> Message Queues
  2. On the right-hand side select the Host you just changed, change the queue to "Delivery", change the list to "All"
  3. Click Display Filtered
  4. Select the messages you want to retry
  5. Click Flush

As a best practice you should always match your external MX records with the MTA host name, for more information, please check the following article:
Symantec Messaging Gateway (SMG) - Best Practices: New Deployments

 

Applies To

- The MTA host name on the Symantec Brightmail Gateway has a different name such as "smg.example.com"
- There are no public MX records with the MTA host name  "smg.example.com"