Mail Rejection Problem .

[adminbydefault]

I need help determining why a particular address is being rejected!

In attempts to prevent Spam I have the following settings in the notes.ini:

SMTPMTA_REJECT_RELAYS=1
SMTPMTA_ALLOW_KNOWN_DOMAINS=1
SMTP_OCH_REJECT_SMTP_ORIGINATED_MESSAG

I have the * set in the Inbound Relay Controls and all DNS checks are disabled in the Current Server Document.

My customer is using MS exchange and recently changed their configuration. Previously all in and outbound mail was routed through their primary server, this system worked fine. They changed their configuration and now outbound mail is routed directly from each site location. The outbound mail is being identified by my server as the IP address of the site location firewall. As soon as the mail hits my Domino server the following message displays:

mail from user@test.com rejected for policy reasons

As they say the customer is always right so I need to either change my configuration to be able to accept mail from this user or be able to tell them what to change so that my system will accept their mail.

Can anyone help me determine What policy is rejecting this mail?

Any help would be much appreciated!

Adminbydefault.

 

[Packet7]

Hello,
I would check that "test.com" is part of your valid domain names in the NAB. Also, are you running Reverse DNS look-ups?

Rgds,

John Judge

 

[adminbydefault]

Hi John Judge,

Thanks for the reply. Please note I am not a Lotus Admin.

I am not sure what the NAB is? Notes Address Book? If so, how would this cause my problem?

As far as rDNS, that is great question. I am assuming we are, but I cannot find a setting in the notes.ini or config document that specifically refers to rDNS lookups. Just in case, I asked the customer to add a PTR record for this purpose and we still have the same problem. Assuming I am using rDNS is there anywhere that defines specifics as to what Domino is looking for in regards to a vaild PTR or rDNS?

Thanks

Adminbydefault

 

[adminbydefault]

FYI for anyone who may encounter a similar problem with mail rejections. I was finaly able to discover that the last two letters of my customers domain were causing the server to reject the mail. In my case the customers domain name ened ????????????cs.com and I had rule set to deny mail specificaly from cs.com. I was under the impression the server would only deny mail from cs.com not any domain where the last two letters were cs.com.

Hope this might be helpfully to anyone else who may be experiencing strange mail rejection issues.

Regards

Adminbydefault

 

[mikeataltis]

Its a good one isn't it. The field level help indicates that entering acme.com matches serve1.acme.com - but it does not specify that it also matches xacme.com, which seems to be the case for you.

Have you tried using dotted notation i.e. ".cs.com"

Mike

http://www.altisltd.com

 

[adminbydefault]

I certainly found it very interesting. Your reference to the help brings up a good point. Not only does it match xacme.com it appears to match cme.com, and me.com as well.

I have not tried using the dotted notation ".cs.com". I will give that a try.

Thanks

Adminbydefault