Your Users send encrypted emails using Symantec Policy Based Encryption-Z (PBE-Z). Shortly after the user receives a non delivery receipt (NDR) or bounced email stating delivery failed to the intended recipient.
Delivery has failed to these recipients or groups:
A problem occurred during the delivery of this message. Please try to resend the message later. If the problem continues, contact your helpdesk.
Diagnostic information for administrators:
Generating server: server-**.bemta-**.messagelabs.com
Remote Server returned '< #5.4.6 smtp; 551 5.4.6 [internal] Private/Loopback Address>'
The inbound route configured for the registered subdomain for the PBE-Z service has been incorrectly configured. When subscribed to the PBE-Z service, 2 subdomains will be added to your account.
Each of these subdomains will be configured with a custom inbound route unique to them. This is to ensure, once the email triggers your encryption policy, that it is routed to the proper encryption server and processed for delivery. these routes will be the following, depending on your region.
If the pc01 route is configured to be used for the encryptz subdomain, the bounce back stated above will be received by the sender.
The inbound route for the encryptz subdomain must be corrected for proper email encryption routing. To do this, follow the below steps:
To add a custom route to a domain
Select Services > Email Services > Inbound Routes.
In the Custom Routes section, click Manage Settings against the domain you want to add the custom route to.
Click Add and Check New Custom.
Enter the route based on your encryptz subdomain as describe above in the cause section.
Please allow up to 1 hour for propagation to complete before the new route takes effect.