A DNS report looks very odd. http://www.dnsreport.com/tools/dnsreport.ch?domain=palmdrivehospital.com My instinct says compromised machine. Is the IP address on the MX records correct? Is it your IP address? Simon. -- Simon Butler MCP, MCSA, MVP:Exchange Amset IT Solutions Ltd. e: simon@xxxxxxxxxxxx w: www.amset-it.com w: www.amset.info -----Original Message----- From: Mark Morgan [mailto:mmorgan@xxxxxxxxxxxxxxxxxxxxx] Sent: 28 November 2005 22:48 To: [ExchangeList] Subject: [exchangelist] message blocked by grandhyattbali.com http://www.MSExchange.org/ I have Exch 2003 sp2, today messages sent to my server are getting bounced back with a message user@xxxxxxx You do not have permission to send to this recipient, for assistance contact your admin. <XXXXX.org # 5.7.1 smtp;550 5.7.1 65.xxx.xxx.xxx has been blocked by grandhyattbali.com> I am not have any connection with grandhyattbali.com we are a small local hospital. Any Ideas? ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: exchange-list3@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Report abuse to info@xxxxxxxxxxxxxx