Relay Denied . . . (I'm not relaying. . . wtf?) 1

[michigan]

Hi all -

I have an interesting situation. I'm not positive if the issue is on my side or not.

One of my users has sent an email to a local state agency. She soon receives a message for our internal mailer-daemon@our.mail.org stating

"thisperson@jud.state.az.us (550 thisperson@jud.state.az.us ...Relaying denied)"

I've tried sending the email too, with the same mailer-daemon return. Properties under SENT ITEMS shows the lil'unhappy face -- like it never left my PO [[Transfer Failed]].

I have RELAY turned off, and haven't seen this error before - at least not from our internal mailer-daemon. Please help me understand what may be going on. Does my system see this address differently? Is it even making it outta my system.

Thanks In Advance.




(** emails have been changed to protect the innocent**)

 

[Lou0686]

Hi,

This message usially mean that your gateway is acting as an open relay. You need to test your gateway to see if it's acting as an open realy.

You don't say what GroupWise version you are using or wether you are using GWIA.

Perform the following test:

Telnet your gateway IP address at port 25,
type "helo"
type &quot;mail from:<an_outside_email_address>
you should get an OK
type &quot;rcpt to::<an_outside_email_address>
if you get an ok, you have an open realy. If not you should get a message similar to &quot;Relaying not allowed&quot;. If you get the latter message you should be ok.

Lou

 

[graver]

If you would to see if you are listed as an open relay go to the following site....

http://www.abuse.net/relay.html

I had a problem with this when I took over my network. I was able to patch my gwia and close my relay...To get off an open relay list they will have to test your relay with a series of tests to make sure that the relay has been closed...Now I can send email anywhere again...YEAH If you need assistance let me know maybe I can help you out...

Tamra Graver --CNA
*************************************
It is my job to comfort the disturbed
and disturb the comfortable..........

 

[michigan]

Thanks for the fast replies.

Lou - sorry 'bout lack of info: Running GW - 6.0 SBE sp1 (machines tested w/Win98x, Win2k)
I tried the telnet - but I couldn't even get to it. Connection failed everytime.

Graver - great link. I tested our mail server. Each of the 17 tests stated &quot;550 Relay Denied&quot; and final response was &quot;All Tests performed, no relays accepted&quot;. We aren't listed as a relay address (with ORDBs neither).

So would it be safe to say that for some reason, the email address we are sending to is &quot;appearing&quot; somewhere within OUR GroupWise system as a &quot;relay&quot; attempt? Basically, the mail isn't even making it out of our email server, is it?

If so, is it possible that since this email has 3 hosts behind the domain x.x.x.us this is what is making it crap out?

I appreciate your feedback and suggestions. Since I don't have another person to send a test to at that domain, I'm not sure what else to do for testing/resolution.

 

[graver]

Can you send to the above address using a web-based mailer service...like yahoo or something like that....I am assuming that other internet mail is processing through your GW...right?

It may be possible that the state agency has some kind of Spam Program that is blocking your domain unknowingly. I run GWAVA and when I subcribed to BLOCK.BLARS.NET I started blocking legit email that should have gotten through...Because it could not verify the address of the sender....I know in 5.5 when you go to the domain options and you can choose to have GW verify the sender...I tried that and received a similar message to you....I will look to see if I can find the same option is GW 6....
Tamra Graver --CNA
*************************************
It is my job to comfort the disturbed
and disturb the comfortable..........

 

[graver]

These TIDS might be helpful

TID10062320
TID10062791
TID10065229
TID10008701
Tamra Graver --CNA
*************************************
It is my job to comfort the disturbed
and disturb the comfortable..........

 

[michigan]

graver -

Thanks for all your help. It appears we were given their internal/intranet address. We were given their correct address (thatperson@courts.az.us) and everything works fine.

I don't have another email address to test that uses x.x.x.us (4 deep) - but I'm wondering if this was the issue in the first place. Maybe that's a general rule of email, that you can't have 4 layers deep. If so, I shoulda' known that! If not, guess I shoulda' known that too!