1 Reply Latest reply on Sep 29, 2015 11:59 AM by John Siegel

    Undeliverable email response from Office 365 Exchange email.

    John Siegel Guide

      Hi All,

       

               We are getting a steady stream of email response from the Microsoft exchange servers (see below). Anyone else experiencing this behavior? It just started about three weeks ago. Here's my theory:

       

      As part of the response in the message info I’m seeing these
      lines:

       

      Authentication-Results: spf=none (sender IP is
      128.138.128.232)

      1. smtp.helo=ipmx2.colorado.edu; o365.colorado.edu;
        dkim=none (message not

      signed) header.d=none;

      Received-SPF: None (protection.outlook.com: ipmx2.colorado.edu does not

      designate
      permitted sender hosts)

      Received: from ipmx2.colorado.edu (128.138.128.232) by

      BN1BFFO11FD004.mail.protection.outlook.com

      Does that mean the Sender Policy Framework (SPF) record for :
      ipmx2.colorado.edu
      does not allow it to send through the servers used –
      hence the test failed. Any chance the “register your email account” response is
      being rejected by the Office 365 servers as spam, then iron port responds by
      saying the email can’t be delivered?

       

      Does anyone know if Office 365 has always been using SPF as a spamming filter or
      is that new? If Microsoft just added this it may explain why we are suddenly
      getting all these bounce backs.

       

      Thoughts?

       

      Thanks,

       

                    John

       

       

       

      MD

      Mail Delivery System <MAILER-DAEMON@ipmx6.colorado.edu>

      Tue 8/25/2015 5:28 PM

       

      MAILER-DAEMON@mx.colorado.edu;

       

      To send this message again, click
      here.

      The following message to
      <MAILER-DAEMON@mx.colorado.edu> was undeliverable.

      The reason for the problem:

      5.1.0 - Unknown address
      error 550-'#5.1.0 Address rejected.'

       

      --------------------------------------------------------------------------------------------------------------------------------------

      Undeliverable:
      (No subject)

       

      MD

      Mail Delivery System <MAILER-DAEMON@mx.colorado.edu>

      Tue 8/25/2015 5:28 PM

       

      anth5615@colorado.edu;

       

      To send this message again, click here.

      The
      following message to <anth5615@colorado.edu>
      was undeliverable.

      The reason for the problem:

      5.3.0 - Other mail system
      problem 554-'Too many hops'

       

      Undeliverable:
      MobilePrint Notification: Please complete your email registration (No subject)

       

      MD

      Mail Delivery System <MAILER-DAEMON@ipmx6.colorado.edu>

      Tue 8/25/2015 5:28 PM

       

      MAILER-DAEMON@ipmx5.colorado.edu;

       

      To send this message again, click here.

      The
      following message to <MAILER-DAEMON@ipmx5.colorado.edu>
      was undeliverable.

      The reason for the problem:

      5.1.0 - Unknown address error 550-'#5.1.0 Address rejected.'

      --------------------------------------------------------------------------------------------------------------------------------------------

      The return path is from Microsoft, which implies that the original
      bounce back occurs on O-365.

       

      Return-Path: <>

      X-MS-Exchange-Organization-Network-Message-Id:
      eb6b023d-62c1-4008-aa35-08d2ada4d3dc

      X-EOPAttributedMessage: 0

      X-MS-Exchange-Organization-MessageDirectionality: Incoming

      X-Forefront-Antispam-Report:
      CIP:128.138.128.232;CTRY:US;IPV:NLI;EFV:NLI;SFV:NSPM;SFS:(6009001)(2970300002)(428002)(3050300001)(199003)(189002)(319900001)(5001830100001)(62966003)(5000100001)(92566002)(189998001)(19580395003)(110136002)(19580405001)(960300001)(84326002)(5001970100001)(5001860100001)(87836001)(107886002)(2171001)(564344004)(229853001)(54356999)(50986999)(2351001)(101416001)(76506005)(64706001)(512954002)(106466001)(46656002)(105586002)(89122001)(78352002)(77156002)(4001540100001)(450100001)(88552001)(57986006)(46102003)(16796002)(42382002)(1476001)(33646002)(7059030)(53652003)(71996002);DIR:INB;SFP:;SCL:1;SRVR:DM2PR0301MB0720;H:ipmx2.colorado.edu;FPR:;SPF:None;PTR:ipmx2.colorado.edu;A:0;MX:0;LANG:;

      Note:
      ironport5.int.colorado.edu is blocked? How is it getting to the email box?

       

      Mail Delivery System <MAILER-DAEMON@ironport5.int.colorado.edu>

      Wed 8/26/2015 12:08 PM

       

      MAILER-DAEMON@ironport5.int.colorado.edu;

       

      To send this message again, click here.

      The
      following message to <MAILER-DAEMON@ironport5.int.colorado.edu> was
      undeliverable.

      The reason for the problem:

      5.4.7 - Delivery expired
      (message too old) '[Errno 61] Connection refused'

      Note:
      ironport6.int.colorado.edu is blocked? How is it getting to the email box?

       

      MobilePrint Notification: Please
      complete your email registration

      MD

      Mail Delivery System <MAILER-DAEMON@ironport6.int.colorado.edu>

      Wed 8/26/2015 11:26 AM

       

      MAILER-DAEMON@ironport6.int.colorado.edu;

       

      To send this message again, click
      here.

      The following message to
      <MAILER-DAEMON@ironport6.int.colorado.edu> was undeliverable.

      The reason for the problem:

      5.4.7 - Delivery expired (message too old) '[Errno 61] Connection refused'