AnsweredAssumed Answered

Undeliverable email response from Office 365 Exchange email.

Question asked by John Siegel on Aug 26, 2015
Latest reply on Sep 29, 2015 by John Siegel

Hi All,

 

         We are getting a steady stream of email response from the Microsoft exchange servers (see below). Anyone else experiencing this behavior? It just started about three weeks ago. Here's my theory:

 

As part of the response in the message info I’m seeing these
lines:

 

Authentication-Results: spf=none (sender IP is
128.138.128.232)

  1. smtp.helo=ipmx2.colorado.edu; o365.colorado.edu;
    dkim=none (message not

signed) header.d=none;

Received-SPF: None (protection.outlook.com: ipmx2.colorado.edu does not

designate
permitted sender hosts)

Received: from ipmx2.colorado.edu (128.138.128.232) by

BN1BFFO11FD004.mail.protection.outlook.com

Does that mean the Sender Policy Framework (SPF) record for :
ipmx2.colorado.edu
does not allow it to send through the servers used –
hence the test failed. Any chance the “register your email account” response is
being rejected by the Office 365 servers as spam, then iron port responds by
saying the email can’t be delivered?

 

Does anyone know if Office 365 has always been using SPF as a spamming filter or
is that new? If Microsoft just added this it may explain why we are suddenly
getting all these bounce backs.

 

Thoughts?

 

Thanks,

 

              John

 

 

 

MD

Mail Delivery System <MAILER-DAEMON@ipmx6.colorado.edu>

Tue 8/25/2015 5:28 PM

 

MAILER-DAEMON@mx.colorado.edu;

 

To send this message again, click
here.

The following message to
<MAILER-DAEMON@mx.colorado.edu> was undeliverable.

The reason for the problem:

5.1.0 - Unknown address
error 550-'#5.1.0 Address rejected.'

 

--------------------------------------------------------------------------------------------------------------------------------------

Undeliverable:
(No subject)

 

MD

Mail Delivery System <MAILER-DAEMON@mx.colorado.edu>

Tue 8/25/2015 5:28 PM

 

anth5615@colorado.edu;

 

To send this message again, click here.

The
following message to <anth5615@colorado.edu>
was undeliverable.

The reason for the problem:

5.3.0 - Other mail system
problem 554-'Too many hops'

 

Undeliverable:
MobilePrint Notification: Please complete your email registration (No subject)

 

MD

Mail Delivery System <MAILER-DAEMON@ipmx6.colorado.edu>

Tue 8/25/2015 5:28 PM

 

MAILER-DAEMON@ipmx5.colorado.edu;

 

To send this message again, click here.

The
following message to <MAILER-DAEMON@ipmx5.colorado.edu>
was undeliverable.

The reason for the problem:

5.1.0 - Unknown address error 550-'#5.1.0 Address rejected.'

--------------------------------------------------------------------------------------------------------------------------------------------

The return path is from Microsoft, which implies that the original
bounce back occurs on O-365.

 

Return-Path: <>

X-MS-Exchange-Organization-Network-Message-Id:
eb6b023d-62c1-4008-aa35-08d2ada4d3dc

X-EOPAttributedMessage: 0

X-MS-Exchange-Organization-MessageDirectionality: Incoming

X-Forefront-Antispam-Report:
CIP:128.138.128.232;CTRY:US;IPV:NLI;EFV:NLI;SFV:NSPM;SFS:(6009001)(2970300002)(428002)(3050300001)(199003)(189002)(319900001)(5001830100001)(62966003)(5000100001)(92566002)(189998001)(19580395003)(110136002)(19580405001)(960300001)(84326002)(5001970100001)(5001860100001)(87836001)(107886002)(2171001)(564344004)(229853001)(54356999)(50986999)(2351001)(101416001)(76506005)(64706001)(512954002)(106466001)(46656002)(105586002)(89122001)(78352002)(77156002)(4001540100001)(450100001)(88552001)(57986006)(46102003)(16796002)(42382002)(1476001)(33646002)(7059030)(53652003)(71996002);DIR:INB;SFP:;SCL:1;SRVR:DM2PR0301MB0720;H:ipmx2.colorado.edu;FPR:;SPF:None;PTR:ipmx2.colorado.edu;A:0;MX:0;LANG:;

Note:
ironport5.int.colorado.edu is blocked? How is it getting to the email box?

 

Mail Delivery System <MAILER-DAEMON@ironport5.int.colorado.edu>

Wed 8/26/2015 12:08 PM

 

MAILER-DAEMON@ironport5.int.colorado.edu;

 

To send this message again, click here.

The
following message to <MAILER-DAEMON@ironport5.int.colorado.edu> was
undeliverable.

The reason for the problem:

5.4.7 - Delivery expired
(message too old) '[Errno 61] Connection refused'

Note:
ironport6.int.colorado.edu is blocked? How is it getting to the email box?

 

MobilePrint Notification: Please
complete your email registration

MD

Mail Delivery System <MAILER-DAEMON@ironport6.int.colorado.edu>

Wed 8/26/2015 11:26 AM

 

MAILER-DAEMON@ironport6.int.colorado.edu;

 

To send this message again, click
here.

The following message to
<MAILER-DAEMON@ironport6.int.colorado.edu> was undeliverable.

The reason for the problem:

5.4.7 - Delivery expired (message too old) '[Errno 61] Connection refused'

Outcomes