Delivery Failure 550 5.1.1 User unknown

Yesterday, we upgraded our Domino server running on an Iseries to 6.5.6 from 6.5.5 and then applied fix pack 3.

Since then, our inbound SMTP email stopped working. Our setup is - We use Mailwatch as a store and forward service for inbound SMTP email. Mail gets sent to a spam appliance (Razorgate) and from there to the Domino server. Nothing was changed on the spam appliance.

Here’s what we did try to isolate the problem. I sent an email to a colleague using his smtp address instead of choosing him from the directory and he received it.

I also opened up a telnet session and sent an email to myself from my gmail account and I got that email too.

Finally as a last resort we diverted inbound email to bypass the spam appliance and go directly to the Domino server and we then started receiving inbound SMTP mail.

I am at a loss as to what could have caused this issue. In the server configuration document, I have ‘Verify sender’s domain in DNS’ set to disabled. I also have ‘Verify that local domain recipients exist in the Domino directory’ set to Enabled. We would like to go back to the original configuration routing email from the spam appliance to the Domino server. Any advice from experienced admins would be very much appreciated.

Here is the header information from the bounce back I received in my personal gmail account.

Many thanks,

Dan

Message header follows:

Delivered-To: dsoares2004+caf_=dasoares=phc.edu@gmail.com

Received: by 10.142.12.12 with SMTP id 12cs253957wfl;

    Wed, 28 May 2008 06:45:09 -0700 (PDT)

Received: by 10.140.133.10 with SMTP id g10mr1183882rvd.170.1211982308952;

    Wed, 28 May 2008 06:45:08 -0700 (PDT)

Return-Path: <>

Received: from domino1.phc.edu (mail.phc.edu [12.179.243.135])

    by mx.google.com with ESMTP id 34si2080127yxl.0.2008.05.28.06.45.08;

    Wed, 28 May 2008 06:45:08 -0700 (PDT)

Received-SPF: pass (google.com: domain of domino1.phc.edu designates 12.179.243.135 as permitted sender) client-ip=12.179.243.135;

Authentication-Results: mx.google.com; spf=pass (google.com: domain of domino1.phc.edu designates 12.179.243.135 as permitted sender) smtp.mail=; dkim=neutral (body hash did not verify) header.i=@gmail.com

Received: from razorgate.phc.edu ([10.10.0.19])

      by domino1.phc.edu (Lotus Domino Release 6.5.6FP3)

      with ESMTP id 2008052809432395-87 ;

      Wed, 28 May 2008 09:43:23 -0400 

Received: from localhost (localhost)

by razorgate.phc.edu (MOS 3.8.4-GA)

with internal id ASM00032;

Wed, 28 May 2008 10:02:10 -0400 (EDT)

X-Forwarded-To: dasoares@phc.edu

X-Forwarded-For: dsoares2004@gmail.com dasoares@phc.edu

Delivered-To: dsoares2004@gmail.com

Authentication-Results: mx.google.com; spf=pass (google.com: domain of domino1.phc.edu designates 12.179.243.135 as permitted sender) smtp.mail=; dkim=neutral (body hash did not verify) header.i=@gmail.com

Received-SPF: pass (lomwsm16.mwlo.mailwatch.com: domain of dsoares2004@gmail.com designates 74.125.46.153 as permitted sender) receiver=lomwsm16.mwlo.mailwatch.com; client_ip=74.125.46.153; envelope-from=dsoares2004@gmail.com;

X-MW-PTR-RESULT: OK yw-out-1718.google.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

    d=gmail.com; s=gamma;

    h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type;

    bh=qHUQqFVTYOZ6Z3kjLeayz/GMuIHRdD+ul3IfZMU2VvA=;

    b=gdBRUx1188Cl1P7WMz/FcnH7M95b1LrLd9+xQVSZFrH1AWa4UWiPxW2aiCdkO4wPqdth1WnBbjbnjX+cL6FvaqeMU2FM1GR8f5AQTQSHKUJ8NQ31mIQNZNqE198nvaZc/RKMHL6zcj6F+tMeH1IphJHZK5gDQpmSqTHYsp32/Vg=

DomainKey-Signature: a=rsa-sha1; c=nofws;

    d=gmail.com; s=gamma;

    h=message-id:date:from:to:subject:mime-version:content-type;

    b=eOARUaVeo4pCled6nr2DKczBsxKJMWlv/g+uTsLa2jlvLa91mKu0bXSLkzCxgTDKb3dpgJMqQxnWTIihBptQSVlNEs1Vi8n1UlxiqmVuIeVM0sA0xahEVmnr+roMGfOY0HbXSbLsqzRdGsOPb2S/6PVVLihE+cc7waFfjqFM7kk=

Message-ID: 2838fc520805280644l5894fa8by70fb0a5b754f26ec@mail.gmail.com

Date: Wed, 28 May 2008 10:02:10 -0400

From: Mail Delivery Subsystem MAILER-DAEMON@phc.edu

To: Mail Delivery Subsystem MAILER-DAEMON@phc.edu

Subject: DELIVERY FAILURE: 550 5.1.1 User unknown

X-MW-BTID: 104125000020081494949800003

X-MW-CTIME: 1211982295

X-MW-SENDING-MTA: 74.125.46.153

X-Virus-Scanned: ClamAV version 0.91.2, clamav-milter version 0.91.2 on lomwsm16.mwlo.mailwatch.com

X-Virus-Status: Clean

HOP-COUNT: 1

X-OriginalArrivalTime: 28 May 2008 13:44:59.0797 (UTC) FILETIME=[05C75C50:01C8C0C9]

X-MIMETrack: Itemize by SMTP Server on DOMINO1/PHC(Release 6.5.6FP3|March 27, 2008) at

05/28/2008 09:43:18,

Serialize by Router on DOMINO1/PHC(Release 6.5.6FP3|March 27, 2008) at 05/28/2008

09:43:19,

Serialize complete at 05/28/2008 09:43:19,

Itemize by SMTP Server on DOMINO1/PHC(Release 6.5.6FP3|March 27, 2008) at

05/28/2008 09:43:24,

Serialize by Router on DOMINO1/PHC(Release 6.5.6FP3|March 27, 2008) at 05/28/2008

09:43:24,

Serialize complete at 05/28/2008 09:43:24

X-MAILWATCH-INSTANCEID: 0103001a858c0bb3-30b9-4b96-bb90-20dcd6127c73

X-Junkmail-Status: score=10/50, host=razorgate.phc.edu

X-Junkmail-SD-Raw: score=unknown,

refid=0001.0A01020A.483D61E3.0051-F-9005+gRKownq6hS59X/nnA==,

ip=216.157.241.11,

so=2007-03-13 10:31:19,

dmn=2005-05-20 17:56:59

MIME-Version: 1.0

Content-Type: multipart/report; report-type=delivery-status; boundary=“==IFJRGLKFGIR5142266UHRUHIHD”

–==IFJRGLKFGIR5142266UHRUHIHD

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: base64

VGhlIG9yaWdpbmFsIG1lc3NhZ2Ugd2FzIHJlY2VpdmVkIGF0IFdlZCwgMjggTWF5IDIwMDggMTA6

MDI6MDkgLTA0MDAgKEVEVCkNCmZyb20gbG9td3NtMDUubXdsby5tYWlsd2F0Y2guY29tIFsyMTYu

MTU3LjI0MS4xMV0NCg0KICAgLS0tLS0gVGhlIGZvbGxvd2luZyBhZGRyZXNzZXMgaGFkIHBlcm1h

bmVudCBkZWxpdmVyeSBlcnJvcnMgLS0tLS0NCjxkYXNvYXJlc0BwaGMuZWR1Pg0KDQogICAtLS0t

LSBUcmFuc2NyaXB0IG9mIHNlc3Npb24gaXMgdW5hdmFpbGFibGUgLS0tLS0NCg0KDQo=

–==IFJRGLKFGIR5142266UHRUHIHD

Content-Type: message/delivery-status

Reporting-MTA: dns; phc.edu

Arrival-Date: Wed, 28 May 2008 10:02:09 -0400 (EDT)

Final-Recipient: RFC822; dasoares@phc.edu

Action: failed

Status: 5.2.0

Remote-MTA: X-Unix; mirapoint

Diagnostic-Code: smtp; 550 5.1.1 User unknown

Last-Attempt-Date: Wed, 28 May 2008 10:02:10 -0400 (EDT)

–==IFJRGLKFGIR5142266UHRUHIHD

Content-Type: message/rfc822

Received: from lomwsm05.mwlo.mailwatch.com (lomwsm05.mwlo.mailwatch.com [216.157.241.11])

by razorgate.phc.edu (MOS 3.8.4-GA)

with ESMTP id ASM00031;

Wed, 28 May 2008 10:02:08 -0400 (EDT)

Received: from lomwsc26.mwlo.mailwatch.com (lomw-smout-vip.mwlo.mailwatch.com [216.157.241.105])

by lomwsm05.mwlo.mailwatch.com (8.13.5.20060308/8.13.5) with ESMTP id m4SDj5iJ016549

for <dasoares@phc.edu>; Wed, 28 May 2008 09:45:05 -0400 (EDT)

Received: from mail pickup service by lomwsc26.mwlo.mailwatch.com with Microsoft SMTPSVC;

 Wed, 28 May 2008 09:45:05 -0400

Received: from 216.157.241.100 ([216.157.241.100]) by LOMWSC26.mwlo.mailwatch.com with SMTP id 0003001a858c0bb3-30b9-4b96-bb90-20dcd6127c73;

 Wed, 28 May 2008 09:45:05 -0400

Received: from yw-out-1718.google.com (yw-out-1718.google.com [74.125.46.153])

by lomwsm16.mwlo.mailwatch.com (8.13.8/8.13.8/SuSE Linux 0.8) with ESMTP id m4SDit5h001143

for <dasoares@phc.edu>; Wed, 28 May 2008 09:45:03 -0400

Received: by yw-out-1718.google.com with SMTP id 5so1792469ywm.8

    for <dasoares@phc.edu>; Wed, 28 May 2008 06:45:04 -0700 (PDT)

Received: by 10.143.30.16 with SMTP id h16mr1053462wfj.44.1211982303931;

    Wed, 28 May 2008 06:45:03 -0700 (PDT)

Received: by 10.142.12.12 with SMTP id 12cs253954wfl;

    Wed, 28 May 2008 06:45:03 -0700 (PDT)

Received: by 10.141.18.14 with SMTP id v14mr1174384rvi.236.1211982303464;

    Wed, 28 May 2008 06:45:03 -0700 (PDT)

Received: from domino1.phc.edu (mail.phc.edu [12.179.243.135])

    by mx.google.com with ESMTP id 34si2077602yxl.0.2008.05.28.06.45.02;

    Wed, 28 May 2008 06:45:03 -0700 (PDT)

Received: from razorgate.phc.edu ([10.10.0.19])

      by domino1.phc.edu (Lotus Domino Release 6.5.6FP3)

      with ESMTP id 2008052809431826-86 ;

      Wed, 28 May 2008 09:43:18 -0400 

Received: from localhost (localhost)

by razorgate.phc.edu (MOS 3.8.4-GA)

with internal id ASM00030;

Wed, 28 May 2008 10:02:04 -0400 (EDT)

X-Forwarded-To: dasoares@phc.edu

X-Forwarded-For: dsoares2004@gmail.com dasoares@phc.edu

Delivered-To: dsoares2004@gmail.com

Authentication-Results: mx.google.com; spf=pass (google.com: domain of domino1.phc.edu designates 12.179.243.135 as permitted sender) smtp.mail=; dkim=neutral (body hash did not verify) header.i=@gmail.com

Received-SPF: pass (lomwsm16.mwlo.mailwatch.com: domain of dsoares2004@gmail.com designates 74.125.46.153 as permitted sender) receiver=lomwsm16.mwlo.mailwatch.com; client_ip=74.125.46.153; envelope-from=dsoares2004@gmail.com;

X-MW-PTR-RESULT: OK yw-out-1718.google.com

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

    d=gmail.com; s=gamma;

    h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type;

    bh=qHUQqFVTYOZ6Z3kjLeayz/GMuIHRdD+ul3IfZMU2VvA=;

    b=gdBRUx1188Cl1P7WMz/FcnH7M95b1LrLd9+xQVSZFrH1AWa4UWiPxW2aiCdkO4wPqdth1WnBbjbnjX+cL6FvaqeMU2FM1GR8f5AQTQSHKUJ8NQ31mIQNZNqE198nvaZc/RKMHL6zcj6F+tMeH1IphJHZK5gDQpmSqTHYsp32/Vg=

DomainKey-Signature: a=rsa-sha1; c=nofws;

    d=gmail.com; s=gamma;

    h=message-id:date:from:to:subject:mime-version:content-type;

    b=eOARUaVeo4pCled6nr2DKczBsxKJMWlv/g+uTsLa2jlvLa91mKu0bXSLkzCxgTDKb3dpgJMqQxnWTIihBptQSVlNEs1Vi8n1UlxiqmVuIeVM0sA0xahEVmnr+roMGfOY0HbXSbLsqzRdGsOPb2S/6PVVLihE+cc7waFfjqFM7kk=

Message-ID: 2838fc520805280644l5894fa8by70fb0a5b754f26ec@mail.gmail.com

Date: Wed, 28 May 2008 10:02:04 -0400

From: Mail Delivery Subsystem MAILER-DAEMON@phc.edu

To: “Dan Soares” dsoares2004@gmail.com

Subject: DELIVERY FAILURE: 550 5.1.1 User unknown

X-MW-BTID: 104125000020081494949800003

X-MW-CTIME: 1211982295

X-MW-SENDING-MTA: 74.125.46.153

X-Virus-Scanned: ClamAV version 0.91.2, clamav-milter version 0.91.2 on lomwsm16.mwlo.mailwatch.com

X-Virus-Status: Clean

HOP-COUNT: 1

X-OriginalArrivalTime: 28 May 2008 13:44:59.0797 (UTC) FILETIME=[05C75C50:01C8C0C9]

X-MIMETrack: Itemize by SMTP Server on DOMINO1/PHC(Release 6.5.6FP3|March 27, 2008) at

05/28/2008 09:43:18,

Serialize by Router on DOMINO1/PHC(Release 6.5.6FP3|March 27, 2008) at 05/28/2008

09:43:19,

Serialize complete at 05/28/2008 09:43:19,

Itemize by SMTP Server on DOMINO1/PHC(Release 6.5.6FP3|March 27, 2008) at

05/28/2008 09:43:24,

Serialize by Router on DOMINO1/PHC(Release 6.5.6FP3|March 27, 2008) at 05/28/2008

09:43:24,

Serialize complete at 05/28/2008 09:43:24

X-MAILWATCH-INSTANCEID: 0103001a858c0bb3-30b9-4b96-bb90-20dcd6127c73

X-Junkmail-Status: score=10/50, host=razorgate.phc.edu

X-Junkmail-SD-Raw: score=unknown,

refid=0001.0A01020A.483D61E3.0051-F-9005+gRKownq6hS59X/nnA==,

ip=216.157.241.11,

so=2007-03-13 10:31:19,

dmn=2005-05-20 17:56:59

–==IFJRGLKFGIR5142266UHRUHIHD–

Subject: Solution: Delivery Failure 550 5.1.1 User unknown

Problem solved…

I got this email from an IBM software engineer working on our PMR:

Starting in Domino 6.5.6, Domino LDAP code changes were made to comply with RFC 2253. Part of the RFC is to use a valid base DN. So if the query coming to Domino LDAP is not valid, incorrect or no results will be returned.

Domino LDAP does not require a base DN to be specified in the filter. So is it possible to update the Spam filter not specify a base DN, leave the field “Set Base DN” to be null? Base DN on Domino is equivalent to the Organization name. You can use the Domino Organization in the ‘Set Base DN’ field which will restrict look ups in the directory that fall under this Organization.

Here is a document on changes made and possible suggestions:

Doc #: 1256436 Domino LDAP server returns ‘Invalid DN Syntax’ message for previously working searches

URL: http://www.ibm.com/support/docview.wss?rs=899&uid=swg21256436

We modified the Base DN in LDAP lookup of the Spam filter appliance and it worked like a charm.

Dan Soares