Relay to recipient's address denied by your configuration?

Hello,

I have searched this forum but I am either misunderstanding what is being stated or I have another issue.

Right now a process on our domino server sends emails to a group in our Domino directory. It was working for a while and then I tried to fix another problem with SMTP. Anyway, now I cannot accept incoming mail sent to a group.

BTW: I read this post, but it was working previously.

http://www-10.lotus.com/ldd/nd6forum.nsf/55c38d716d632d9b8525689b005ba1c0/80b06b8f8ae1f38485256e58003f989c?OpenDocument

Here’s the console log:

01/28/2005 12:31:52.85 AM [06A4:0006-0B30] SMTP CIServ Listen> Connection Accepted on Port 25 for Session 02EE000A

01/28/2005 12:31:52.85 AM [06A4:0008-0520] SMTP CITask StateMachine> Sent 276 bytes to 192.168.2.206

[06A4:0008-0520] S: 220 Fri, 28 Jan 2005 00:31:52 -0500 - This system is subject to monitoring of all communications and content sent/received/stored on this server. Usage of this server indicates you consent to this monitoring. Any person (direct

[06A4:0008-0520] S: ly or indirectly) who attempts to bypass securi

01/28/2005 12:31:52.89 AM [06A4:0008-0520] SMTP CITask StateMachine> Received 9 bytes from 192.168.2.206

[06A4:0008-0520] R: EHLO ody2

01/28/2005 12:31:52.89 AM [06A4:0008-0B88] SMTP CITask StateMachine> Sent 145 bytes to 192.168.2.206

[06A4:0008-0B88] S: 250-domino.oursite.com Hello ody2 ([192.168.2.206]), pleased to meet you

[06A4:0008-0B88] S: 250-TLS

[06A4:0008-0B88] S: 250-AUTH LOGIN

[06A4:0008-0B88] S: 250-STARTTLS

[06A4:0008-0B88] S: 250-DSN

[06A4:0008-0B88] S: 250-SIZE

[06A4:0008-0B88] S: 250 8BITMIME

01/28/2005 12:31:52 AM SMTP Server: sensei.oursite.com (192.168.2.206) connected

01/28/2005 12:31:53.16 AM [06A4:0008-0B88] SMTP CITask StateMachine> Received 4 bytes from 192.168.2.206

[06A4:0008-0B88] R: RSET

01/28/2005 12:31:53.16 AM [06A4:0008-0520] SMTP CITask StateMachine> Sent 17 bytes to 192.168.2.206

[06A4:0008-0520] S: 250 Reset state

01/28/2005 12:31:53.22 AM [06A4:0008-0520] SMTP CITask StateMachine> Received 27 bytes from 192.168.2.206

[06A4:0008-0520] R: MAIL FROM:kiwi@oursite.com

01/28/2005 12:31:53.24 AM [06A4:0008-0B88] SMTP CITask StateMachine> Sent 34 bytes to 192.168.2.206

[06A4:0008-0B88] S: 250 kiwi@oursite.com… Sender OK

01/28/2005 12:31:53.28 AM [06A4:0008-0B88] SMTP CITask StateMachine> Received 40 bytes from 192.168.2.206

[06A4:0008-0B88] R: RCPT TO:admin.alerts@sensei.oursite.com

01/28/2005 12:31:53.28 AM [06A4:0008-0520] SMTP CITask StateMachine> Sent 74 bytes to 192.168.2.206

[06A4:0008-0520] S: 554 Mail for admin.alerts@sensei.oursite.com rejected for policy reasons.

01/28/2005 12:31:53 AM SMTP Server: Originator: kiwi@oursite.com

01/28/2005 12:31:53 AM SMTP Server [06A4:0008-0B88] Attempt to relay mail to admin.alerts@sensei.oursite.com rejected for policy reasons. Relay to recipient’s address denied by your configuration.

01/28/2005 12:31:53 AM SMTP Server [06A4:0008-0B88] 554 Mail for admin.alerts@sensei.oursite.com rejected for policy reasons.

01/28/2005 12:31:53.39 AM [06A4:0008-0520] SMTP CITask StateMachine> Received 4 bytes from 192.168.2.206

[06A4:0008-0520] R: QUIT

01/28/2005 12:31:53.39 AM [06A4:0008-0B88] SMTP CITask StateMachine> Sent 65 bytes to 192.168.2.206

[06A4:0008-0B88] S: 221 domino.oursite.com SMTP Service closing transmission channel

01/28/2005 12:31:53 AM SMTP Server: sensei.oursite.com (192.168.2.206) disconnected. 0 message[s] received

Here’s our server’s config doc SMTP tab entries.

Inbound Relay Controls

Allow messages to be sent only to the following external internet domains:

Deny messages to be sent to the following external internet domains: (* means all) *

Allow messages only from the following internet hosts to be sent to external internet domains: [192.168.5.20]; [192.168.2.206]; *.oursite.com

Deny messages from the following internet hosts to be sent to external internet domains:(* means all) *

Inbound Relay Enforcement

Perform Anti-Relay enforcement for these connecting hosts: External hosts

Exclude these connecting hosts from anti-relay checks: [192.168.1.]; [192.168.2.]; [192.168.3.*]

Exceptions for authenticated users: Allow all authenticated users to relay DNS Blacklist Filters

DNS Blacklist filters: Enabled

DNS Blacklist sites: list.dsbl.org; blackholes.five-ten-sg.com; dnsbl.njabl.org; relays.ordb.org; dnsbl.antispam.or.id; sbl.spamhaus.org; bl.spamcop.net

Desired action when a connecting host is found in a DNS Blacklist: Log and tag message

Custom SMTP error response for rejected messages: Host %s found at DNS Blacklist %s

Inbound Connection Controls

Verify connecting hostname in DNS: Enabled

Allow connections only from the following SMTP internet hostnames/IP addresses: [192.168.5.]; [192.168.1.]; [192.168.2.]; [192.168.3.]; .oursite.com; .oursite2.com; [216.xx.xx.6]; [192.168.100.]; .dnsstuff.com; [65.196.xx.253]; [138.162.xx.]

Deny connections from the following SMTP internet hostnames/IP addresses: [127.0.0.2]; [127.0.0.3]; [127.0.0.4]; [127.0.0.5]; [127.0.0.6]; [127.0.0.7]’ [127.0.0.8]; [127.0.0.9]; [127.0.0.10]

Inbound Sender Controls

Verify sender’s domain in DNS: Enabled

Allow messages only from the following external internet addresses/domains:

Deny messages from the following internet addresses/domains: [127.0.0.1]; [216.54.66.69]; [216.54.66.70]

Inbound Intended Recipients Controls

Verify that local domain recipients exist in the Domino Directory: Enabled

Allow messages intended only for the following internet addresses: *@domino.oursite.com; *@sensei.oursite.com; *@oursite.com

Deny messages intended for the following internet addresses:

The group is defined as follows:

Basics

Group name: mail-admin.alerts-sensei

Group type: Mail only

Category: SysAdmin

Description: Group admin alerts are mailed to.

Mail Domain:

Internet Address: admin.alerts@sensei.oursite.com

Members: Linda Ruiz/OURDOMAIN

Michael S/OURDOMAIN

Pat V/OURDOMAIN

I have that process setup to login using it’s own login account in our Dom Directory.

Any ideas?

Thanks,

Linda :slight_smile:

Subject: Relay to recipient’s address denied by your configuration?

Turns out I had to delete the contents of the Intended Recipients/Allow to get this to work. I don’t know why if our admin.alerts@sensei.oursite.com address is: (1)in our address book (a group), (2) groups are allowed to be sent to and (3) I explicitly added all variations of the sending hosts to inbound relay/allowed area, and (4) the sending host is not really external it’s on the same machine as the domino server - why it was still rejecting it. There were at least 3 ways it should have been accepted according to the documentation I have read.- Linda :frowning: