Routing Error through EOP (Microsoft Exchange Online Protection) from IBM Domino and / or MS Exchange

Mindwatering Incorporated

Author: Tripp W Black

Created: 12/20/2016 at 06:03 PM

 

Category:
Domino Server Issues Troubleshooting
Mail Routing

Error Message from Domino:
"Error transferring to mydomin-com.mail.protection.outlook.com: SMTP Protocol Returned a Permanent Error 550 5.7.64 TenantAttribution; Relay Access Denied"

Update the Domain Connection doc's destination IP/DNS welcome, or the server (group) configuration document's smart host field, verify that you want to route these messages through the MS EOP product. If so, you need to do one of the following:

1. SMTP Unauthenticated Relay:
Note your external IP, then update the the EOP settings and whitelist the external (public) IP of the Domino server for unauthenticated relay.

2. Client Set-up:
You can set the Domino server as a SMTP client. Update the Domino configuration document adding / updating the following:
Smart host: smtp.office365.com
Port 587 (recommended), or port 25
TLS / StartTLS: Enabled
Username: <mailbox username>
Password: <password>


Error Message from Exchange through Office 365:
"550 5.7.64 TenantAttribution; Relay Access Denied"

For Exchange, verify your scope is correct for the connector that transferred the messages. If you did not intend for the message to go through EOP then update the connector(s) so that mail to Office 365 goes through its connector, and your special connector's hybrid/internal connector goes through another.

Do one of the following:
1. Relay SMTP Set-up:
If you have the connector set-up properly, but the messages are failing, than you need to check what external (public) IP or IPs your messages are routing through (from). You have to whitelist the IPs in EOP so that they are allowed to route.

2. SMTP Client Set-up:
Smart host: smtp.office365.com
Port 587 (recommended), or port 25
TLS / StartTLS: Enabled
Username: <mailbox username>
Password: <password>


Create DNS, Create / Verify Connector, Create / Verify SPF Entry:
1. Sign into Office 365

2. Select Domains

3. Verify the DNS records are correct. Add a new DNS record if needed. Also update the SPF record, adding the server to the list of IPs/DNS names allowed to send e-mail on behalf of the domain.

4. Select Admin from the main menu, and Exchange to go to the Exchange admin center.

5. Review your connectors, add or fix the connections. To create one, use the wizard, click the "+" symbol to set-up.
a. Set From: Your organization's email server
b. Set To: Office 365, and click Next.
c. Add the sending Domino, Exchange, or Postfix server. Leave all other fields at default, and select Save.

6. Test your configuration.



previous page