Error 551

Discussion regarding the Standard version.
Post Reply
fcb
Posts: 4
Joined: Tue May 15, 2018 1:54 pm

Error 551

Post by fcb »

Hello,

we use MailEnable Standard Edition 8.54. Recently we have configured an SPF record to let another system to send e-mails using one of our e-mail address in FROM field. Everything works well when the receiver is a non-local address. But when the e-mail goes to a local address, it returns an error:

551 This mail server requires authentication before sending mail from a locally hosted domain. Please reconfigure your mail client to authenticate before sending mail. 169 39

An attempt to send as mail from xxxxx@xxxxxx.com occurred but the sender did not authenticate and the IP address (XXX.XXX.XXX.XXX) is not defined as a local IP address.


Looking for a solution in the forum, we found this link:

http://www.mailenable.com/kb/content/ar ... D=ME020032

We think that setting the "Address spoofing" option to "Anyone can spoof sender address" is not a valid solution. So we have tried to change from "Authenticated users can spoof sender addresses" to "Autorized connections can spoof sender address". Then, as it is explained, we have added the list of IP of the sender to "Privileged IPs" of the "Relay" section, but it doesn't work. In this section there is a warning saying that these settings do not affect any emails addressed to a local user. So, is there any solution to receive e-mails in a local address sent by a another server, if SPF is correctly configured???

Thanks in advance.
security.png
security.png (23.15 KiB) Viewed 14222 times
relay1.png
relay1.png (30.64 KiB) Viewed 14222 times

MailEnable-Ian
Site Admin
Posts: 9738
Joined: Mon Mar 22, 2004 4:44 am
Location: Melbourne, Victoria, Australia

Re: Error 551

Post by MailEnable-Ian »

Hi,

You need to inspect the SMTP activity and debug log files and ensure that the incoming IP address that produces the 551 error is the correct IP address you have added the SMTP privileged IP's list.
Regards,

Ian Margarone
MailEnable Support

fcb
Posts: 4
Joined: Tue May 15, 2018 1:54 pm

Re: Error 551

Post by fcb »

MailEnable-Ian wrote:Hi,

You need to inspect the SMTP activity and debug log files and ensure that the incoming IP address that produces the 551 error is the correct IP address you have added the SMTP privileged IP's list.
Yes, it is in the list. What it makes me think that it will not work is the sentence "These settings do not affect any emails addressed to a local user" in the Relay section. And the problem appears with local e-mail. So I'm trying to find a solution for the emails addressed to a local user.

MailEnable-Ian
Site Admin
Posts: 9738
Joined: Mon Mar 22, 2004 4:44 am
Location: Melbourne, Victoria, Australia

Re: Error 551

Post by MailEnable-Ian »

Hi,

The address spoofing option is to stop remote connections trying to spoof a locally hosted address when sending to another locally hosted address. Therefore setting the option to "Authorized connections can spoof the sender address" and adding the IP address to the SMTP privileged IP list should bypass the restriction and work. Would need to see the SMTP activity and debug log files (private me message). Also ensure that you have added the IP address under the correct list. I.e. Deny all - except those in the list.
Regards,

Ian Margarone
MailEnable Support

fcb
Posts: 4
Joined: Tue May 15, 2018 1:54 pm

Re: Error 551

Post by fcb »

Hello Ian,

as you can see in the screenshots of my firt post, the IP were added in the list after selecting the "Denied relay rights" check.

Here you have the Activity and the Debug logs (the IP 162.13.162.XXX is in the list):

Log – Activity:

Code: Select all

05/15/18 13:15:03   SMTP-IN      167F117B6A44450D92F0E45279B31D2F.MAI   388252 162.13.162.XXX                   220 mail.mydomain.com ESMTP MailEnable Service, Version: 8.54-- ready at 05/15/18 13:15:03   0      0      
05/15/18 13:15:03   SMTP-IN      167F117B6A44450D92F0E45279B31D2F.MAI   388252 162.13.162.XXX       EHLO   EHLO mail.sender.com   250-www.mydomain.com [162.13.162.XXX], this server offers 4 extensions  133    39     
05/15/18 13:15:03   SMTP-IN      167F117B6A44450D92F0E45279B31D2F.MAI   388252 162.13.162.XXX       MAIL   MAIL FROM:<email@mydomain.com>   551 This mail server requires authentication before sending mail from a locally hosted domain. Please reconfigure your mail client to authenticate before sending mail.      169    39     
05/15/18 13:15:03   SMTP-IN      167F117B6A44450D92F0E45279B31D2F.MAI   388252 162.13.162.XXX       RSET   RSET   250 Requested mail action okay, completed     43     6
05/15/18 13:15:03   SMTP-IN      167F117B6A44450D92F0E45279B31D2F.MAI   388252 162.13.162.XXX       QUIT   QUIT   221 Service closing transmission channel      42     6
05/15/18 13:15:03   SMTP-IN      6B064AD5F9024F1E8C8ABE4D16187757.MAI   388244 162.13.162.XXX                   220 mail.mydomain.com ESMTP MailEnable Service, Version: 8.54-- ready at 05/15/18 13:15:03   0      0      
05/15/18 13:15:03   SMTP-IN      6B064AD5F9024F1E8C8ABE4D16187757.MAI   388244 162.13.162.XXX       EHLO   EHLO mail.sender.com   250-www.mydomain.com [162.13.162.XXX], this server offers 4 extensions  133    39     
05/15/18 13:15:03   SMTP-IN      6B064AD5F9024F1E8C8ABE4D16187757.MAI   388244 162.13.162.XXX       MAIL   MAIL FROM:<> 250 Requested mail action okay, completed     43     14
05/15/18 13:15:03   SMTP-IN      6B064AD5F9024F1E8C8ABE4D16187757.MAI   388244 162.13.162.XXX       RCPT   RCPT TO:<email@mydomain.com>     250 Requested mail action okay, completed       43     37     
05/15/18 13:15:03   SMTP-IN      6B064AD5F9024F1E8C8ABE4D16187757.MAI   388244 162.13.162.XXX       DATA   DATA   354 Start mail input; end with <CRLF>.<CRLF>  46     6
05/15/18 13:15:03   SMTP-IN      2688A78EC43A4E539F252F2B2288E1C2.MAI   388244 162.13.162.XXX       QUIT   QUIT   221 Service closing transmission channel      42     6
05/15/18 13:15:06   SMTP-IN      2A6B3C263D5C480BABD55D71B86E89A2.MAI   388400 162.13.162.XXX                   220 mail.mydomain.com ESMTP MailEnable Service, Version: 8.54-- ready at 05/15/18 13:15:06   0      0      
05/15/18 13:15:06   SMTP-IN      2A6B3C263D5C480BABD55D71B86E89A2.MAI   388400 162.13.162.XXX       EHLO   EHLO mail.sender.com   250-www.mydomain.com [162.13.162.XXX], this server offers 4 extensions  133    39     
05/15/18 13:15:06   SMTP-IN      2A6B3C263D5C480BABD55D71B86E89A2.MAI   388400 162.13.162.XXX       MAIL   MAIL FROM:<email@mydomain.com>   551 This mail server requires authentication before sending mail from a locally hosted domain. Please reconfigure your mail client to authenticate before sending mail.      169    39     
05/15/18 13:15:06   SMTP-IN      2A6B3C263D5C480BABD55D71B86E89A2.MAI   388400 162.13.162.XXX       RSET   RSET   250 Requested mail action okay, completed     43     6
05/15/18 13:15:06   SMTP-IN      2A6B3C263D5C480BABD55D71B86E89A2.MAI   388400 162.13.162.XXX       QUIT   QUIT   221 Service closing transmission channel      42     6
05/15/18 13:15:06   SMTP-IN      FDD85E1376A342CB847831FF3F339853.MAI   388420 162.13.162.XXX                   220 mail.mydomain.com ESMTP MailEnable Service, Version: 8.54-- ready at 05/15/18 13:15:06   0      0      
05/15/18 13:15:06   SMTP-IN      FDD85E1376A342CB847831FF3F339853.MAI   388420 162.13.162.XXX       EHLO   EHLO mail.sender.com   250-www.mydomain.com [162.13.162.XXX], this server offers 4 extensions  133    39     
05/15/18 13:15:06   SMTP-IN      FDD85E1376A342CB847831FF3F339853.MAI   388420 162.13.162.XXX       MAIL   MAIL FROM:<> 250 Requested mail action okay, completed     43     14     
05/15/18 13:15:06   SMTP-IN      FDD85E1376A342CB847831FF3F339853.MAI   388420 162.13.162.XXX       RCPT   RCPT TO:<email@mydomain.com>     250 Requested mail action okay, completed       43     37     
05/15/18 13:15:06   SMTP-IN      FDD85E1376A342CB847831FF3F339853.MAI   388420 162.13.162.XXX       DATA   DATA   354 Start mail input; end with <CRLF>.<CRLF>  46     6
05/15/18 13:15:06   SMTP-IN      2A202F89F50C4784B530957A24F48324.MAI   388420 162.13.162.XXX       QUIT   QUIT   221 Service closing transmission channel      42     6   


Log – Debug:

Code: Select all

05/15/18 13:15:03   ME-IXXXX: [388252] An attempt to send as mail from email@mydomain.com occurred but the sender did not authenticate and the IP address (162.13.162.XXX) is not defined as a local IP address.
05/15/18 13:15:03   ME-I0101: [388244] Local Delivery: Address ([SMTP:email@mydomain.com]) is local.
05/15/18 13:15:03   ME-I0074: [388252] (Debug) End of conversation
05/15/18 13:15:03   ME-I0149: [388244] 6B064AD5F9024F1E8C8ABE4D16187757.MAI was received successfully and delivery thread was initiated
05/15/18 13:15:03   ME-I0074: [388244] (Debug) End of conversation
05/15/18 13:15:06   ME-IXXXX: [388400] An attempt to send as mail from email@mydomain.com occurred but the sender did not authenticate and the IP address (162.13.162.XXX) is not defined as a local IP address.
05/15/18 13:15:06   ME-I0101: [388420] Local Delivery: Address ([SMTP:email@mydomain.com]) is local.
05/15/18 13:15:06   ME-I0074: [388400] (Debug) End of conversation
05/15/18 13:15:06   ME-I0149: [388420] FDD85E1376A342CB847831FF3F339853.MAI was received successfully and delivery thread was initiated
05/15/18 13:15:06   ME-I0074: [388420] (Debug) End of conversation

fcb
Posts: 4
Joined: Tue May 15, 2018 1:54 pm

Re: Error 551

Post by fcb »

Any help? :?

MailEnable-Ian
Site Admin
Posts: 9738
Joined: Mon Mar 22, 2004 4:44 am
Location: Melbourne, Victoria, Australia

Re: Error 551

Post by MailEnable-Ian »

Hi,

Best way forward is to lodge a support ticket and provide access to the log files and server so that a technician can check in more detail.

https://www.mailenable.com/support/step1.asp
Regards,

Ian Margarone
MailEnable Support

Post Reply