"Relay access denied" sending to other hosts

[benito]

Hello!

Some customer are getting random bounces for the emails they send to different addresses outside my servers.

We tested and can replicate the error, no matter if we are using smtp or webmail.

This is a bounce: (changed emails addresses and ip)

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  [email protected]
    host randomdomain.com.ar [1.1.1.1]
    SMTP error from remote mail server after RCPT TO:<[email protected]>:
    554 5.7.1 <[email protected]>:
    Relay access denied
Reporting-MTA: dns; myserver.mydomain.com

Action: failed
Final-Recipient: rfc822;[email protected]
Status: 5.0.0
Remote-MTA: dns; randomdomain.com.ar
Diagnostic-Code: smtp; 554 5.7.1 <[email protected]>: Relay access denied

And this is the exim log for this message.

[[email protected] ~]# grep 1fdF9w-00Ei5V-1z /var/log/exim_mainlog
2018-07-11 10:27:56 1fdF9w-00Ei5V-1z <= [email protected] H=(myserver.beewh.com) [::1]:58278 P=esmtpa A=dovecot_login:[email protected] S=822 [email protected] T="Test Subject" for [email protected] [email protected]
2018-07-11 10:27:56 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1fdF9w-00Ei5V-1z
2018-07-11 10:27:56 1fdF9w-00Ei5V-1z Sender identification U=saenzdyn D=customerdomain.com.ar [email protected]
2018-07-11 10:27:56 1fdF9w-00Ei5V-1z SMTP connection outbound 1531315676 1fdF9w-00Ei5V-1z customerdomain.com.ar [email protected]
2018-07-11 10:27:56 1fdF9w-00Ei5V-1z => administracion <[email protected]> R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 <[email protected]> EH9aNNwFRlv3VTUAZ+xWTQ Saved"
2018-07-11 10:27:58 1fdF9w-00Ei5V-1z ** [email protected]domain.com.ar R=dkim_lookuphost T=dkim_remote_smtp H=randomdomain.com.ar [1.1.1.1]: SMTP error from remote mail server after RCPT TO:<[email protected]>: 554 5.7.1 <[email protected]>: Relay access denied
2018-07-11 10:27:58 cwd=/var/spool/exim 7 args: /usr/sbin/exim -t -oem -oi -f <> -E1fdF9w-00Ei5V-1z
2018-07-11 10:27:58 1fdF9y-00Ei6C-LM <= <> R=1fdF9w-00Ei5V-1z U=mailnull P=local S=2468 T="Mail delivery failed: returning message to sender" for [email protected]
2018-07-11 10:27:58 1fdF9w-00Ei5V-1z Completed
[[email protected] ~]#

I do not know if we are doing something wrong or is an error from the remote server.

Thanks
Cristian

 

[cPanelLauren]

Hi @benito

Do you have anything in

/etc/exim.conf.local

or any custom configurations? Also is it specific domains you're having the issue with?

Thanks!

 

[benito]

Hi @benito

Do you have anything in

/etc/exim.conf.local

or any custom configurations? Also is it specifical domains you're having the issue with?

Thanks!

Hello, that file only contains this:

@[email protected]
chunking_advertise_hosts=""

No custom configuration. This happens randomly to several domains.

Thanks

 

[cPanelLauren]

Hi @benito

Does it happen randomly when you send to several domains or when you send from several domains. The reason I ask is without any customizations to your mail configuration it would have to be something to do with the configuration of the other server. Are the domains you're sending to located in /etc/localdomains ?

 

[benito]

Hi @benito

Does it happen randomly when you send to several domains or when you send from several domains. The reason I ask is without any customizations to your mail configuration it would have to be something to do with the configuration of the other server. Are the domains you're sending to located in /etc/localdomains ?

Hello Lauren, the domains im sending to are on remote servers. Not in ours.

Different customers reports this problem from time to time. I check'd with them the configuration in their email client outgoing server settings and everything looks ok.

Thanks

 

[cPanelLauren]

Hi @benito

I do understand it's remote domains, the only instance where I would think you might run into this issue though is if the domain you're sending to existed on a server that belonged to you. Otherwise, this error getting flagged when being sent to a remote domain occurring randomly doesn't make a lot of sense in terms of something on your server nor would there really be a way to know what's occurring without the logs from the other server.