[ExchangeList] Re: SMTP issues

  • From: <ChongJa@xxxxxxxxxxxxxxxx>
  • To: <exchangelist@xxxxxxxxxxxxx>, <exchangelist@xxxxxxxxxxxxx>
  • Date: Sun, 21 May 2006 18:18:11 -0400

http://www.msexchange.org
-------------------------------------------------------Ok, doing some research 
this is normal when you have diagnostic logging enabled for transport. EEXCH50 
authentication errors are normal between disparate Exchange orgs such as 
foreign domains. Why don't you try telnetting to their mail servers and see if 
it gives you an error. 

XEXCH50 
------------ 
Exchange 2003 only accepts XEXCH50 protocol data from clients who 
authenticate _and_ have been granted "Send As" permission on the receiving 
SMTP virtual server object in the AD. In this respect, Exchange 2003 behaves 
differently than Exchange 2000 (as you have noticed). 


Within a single Exchange organization, Exchange setup takes care of ensuring 
that all Exchange servers have the necessary "Send As" right on all of the 
SMTP virtual servers, through the ACL on the Exchange organization object in 
the AD which inherits down to all of the SMTP virtual server objects. 
Because of this, XEXCH50 should be properly sent and received between 
servers within a single Exchange organization. 


It is expected that Exchange 2003 will block inbound XEXCH50 data from other 
Exchange organizations by default, and in this regard the fact that it is 
responding with "504 Need to authenticate first" is actually correct, if the 
remote server is not part of the same Exchange organization. 


If you're seeing this between servers in the same Exchange organization, 
that is potentially an authentication or ACLing problem that should be 
looked into. You can use ADSIEdit.msc to investigate the ACLs of the 
Exchange objects in the configuration container if you suspect that the 
necessary Exchange server security groups have not been granted the Send As 
access that they need on the SMTP virtual servers. 


If you're seeing this between servers in different Exchange organizations, 
it is normal expected behavior, and should not actually block mailflow. 


When Exchange 2003 rejects an inbound XEXCH50 attempt, it allows the client 
to continue without the XEXCH50 data. When Exchange 2000 or 2003 attempt to 
send an XEXCH50 command and are denied, they continue to try and send their 
message data. 





________________________________

From: exchangelist-bounce@xxxxxxxxxxxxx on behalf of Andrew English
Sent: Sun 5/21/2006 3:03 PM
To: exchangelist@xxxxxxxxxxxxx
Subject: RE: [ExchangeList] Re: SMTP issues



I might be looking in the wrong place; I am looking under Routing Groups / 
Connectors and it's empty under ESM?
 
Regards,
Andrew

________________________________

From: exchangelist-bounce@xxxxxxxxxxxxx on behalf of Jim Harrison
Sent: Sun 21/05/2006 11:06 AM
To: exchangelist@xxxxxxxxxxxxx
Subject: [ExchangeList] Re: SMTP issues



http://www.msexchange.org
-------------------------------------------------------JFC, Andy..!
- With what host?
The remote host "67.69.144.11"
- Delete mine? What?
Any and all Exch "connector" definitions

-----Original Message-----
From: exchangelist-bounce@xxxxxxxxxxxxx
[mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Andrew English
Sent: Sunday, May 21, 2006 7:37 AM
To: exchangelist@xxxxxxxxxxxxx
Subject: [ExchangeList] Re: SMTP issues

http://www.msexchange.org
-------------------------------------------------------
With what host?
Delete mine? What?


-----Original Message-----
From: exchangelist-bounce@xxxxxxxxxxxxx
[mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
Sent: Sunday, May 21, 2006 12:33 AM
To: exchangelist@xxxxxxxxxxxxx
Subject: [ExchangeList] Re: SMTP issues

http://www.msexchange.org
-------------------------------------------------------Do you have an
agreement to use an Exch connector with that host?
If not, delete yours.
Exch only uses "xexch###" commands for defined connectors.

-----Original Message-----
From: exchangelist-bounce@xxxxxxxxxxxxx
[mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Andrew English
Sent: Saturday, May 20, 2006 6:04 PM
To: exchangelist@xxxxxxxxxxxxx
Subject: [ExchangeList] Re: SMTP issues

http://www.msexchange.org
-------------------------------------------------------Hi Jim,

I have contacted the Admin at the other side and inquired about this
error message, he assures me they don't require authentication, I know
they are using Exchange as I already have telnet into their SMTP server.
They also told me they are able to send/receive emails from other people
on the internet without any issues.

As for our server we do have the Integrated Windows Authentication
turned on, as well as the delivery FQDN is valid. (mail.autosoldnow.com)

Still not what else to do in my end or tell the guy to do on his.

Andrew




-----Original Message-----
From: exchangelist-bounce@xxxxxxxxxxxxx
[mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
Sent: Saturday, May 20, 2006 1:52 PM
To: exchangelist@xxxxxxxxxxxxx
Subject: [ExchangeList] Re: SMTP issues

http://www.msexchange.org
-------------------------------------------------------Not related to
IMF at all.
"504 Need to authenticate first" - that's pretty clear; the destination
server requires authentication.
Have you defined that connector as requiring authentication?

-----Original Message-----
From: exchangelist-bounce@xxxxxxxxxxxxx
[mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Andrew English
Sent: Saturday, May 20, 2006 10:56 AM
To: exchangelist@xxxxxxxxxxxxx
Subject: [ExchangeList] Re: SMTP issues

Hi,

I am having some issues with the SMTP server, when it sends emails to
certain servers online it reports the following error:

This is an SMTP protocol error log for virtual server ID 1, connection
#702. The remote host "67.69.144.11", responded to the SMTP command
"xexch50" with "504 Need to authenticate first ". The full command sent
was "XEXCH50 1036 2 ". This will probably cause the connection to fail.

I have yet to figure out why this is?? I am using Exchange 2003 with SP2
and IMF v2.

Regards,
Andrew



All mail to and from this domain is GFI-scanned.

-------------------------------------------------------
List Archives: http://www.freelists.org/archives/exchangelist/ 
MSExchange Newsletter: http://www.msexchange.org/pages/newsletter.asp
MSExchange Articles and Tutorials:
http://www.msexchange.org/articles_tutorials/
MSExchange Blogs: http://blogs.msexchange.org/
-------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
-------------------------------------------------------
To unsubscribe visit http://www.msexchange.org/pages/exchangelist.asp
Report abuse to listadmin@xxxxxxxxxxxxxx

-------------------------------------------------------
List Archives: http://www.freelists.org/archives/exchangelist/ 
MSExchange Newsletter: http://www.msexchange.org/pages/newsletter.asp
MSExchange Articles and Tutorials:
http://www.msexchange.org/articles_tutorials/
MSExchange Blogs: http://blogs.msexchange.org/
-------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
-------------------------------------------------------
To unsubscribe visit http://www.msexchange.org/pages/exchangelist.asp
Report abuse to listadmin@xxxxxxxxxxxxxx


All mail to and from this domain is GFI-scanned.

-------------------------------------------------------
List Archives: http://www.freelists.org/archives/exchangelist/ 
MSExchange Newsletter: http://www.msexchange.org/pages/newsletter.asp
MSExchange Articles and Tutorials:
http://www.msexchange.org/articles_tutorials/
MSExchange Blogs: http://blogs.msexchange.org/
-------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
-------------------------------------------------------
To unsubscribe visit http://www.msexchange.org/pages/exchangelist.asp
Report abuse to listadmin@xxxxxxxxxxxxxx

-------------------------------------------------------
List Archives: http://www.freelists.org/archives/exchangelist/ 
MSExchange Newsletter: http://www.msexchange.org/pages/newsletter.asp
MSExchange Articles and Tutorials:
http://www.msexchange.org/articles_tutorials/
MSExchange Blogs: http://blogs.msexchange.org/
-------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
-------------------------------------------------------
To unsubscribe visit http://www.msexchange.org/pages/exchangelist.asp
Report abuse to listadmin@xxxxxxxxxxxxxx


All mail to and from this domain is GFI-scanned.

-------------------------------------------------------
List Archives: http://www.freelists.org/archives/exchangelist/ 
MSExchange Newsletter: http://www.msexchange.org/pages/newsletter.asp
MSExchange Articles and Tutorials: http://www.msexchange.org/articles_tutorials/
MSExchange Blogs: http://blogs.msexchange.org/
-------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
-------------------------------------------------------
To unsubscribe visit http://www.msexchange.org/pages/exchangelist.asp
Report abuse to listadmin@xxxxxxxxxxxxxx



-------------------------------------------------------
List Archives: http://www.freelists.org/archives/exchangelist/
MSExchange Newsletter: http://www.msexchange.org/pages/newsletter.asp
MSExchange Articles and Tutorials: http://www.msexchange.org/articles_tutorials/
MSExchange Blogs: http://blogs.msexchange.org/
-------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
-------------------------------------------------------
To unsubscribe visit http://www.msexchange.org/pages/exchangelist.asp
Report abuse to listadmin@xxxxxxxxxxxxxx

Other related posts: