Where to find reason for 554 5.7.1 rejection

nickwuk

Active Member
Jul 18, 2009
28
2
53
I've tried sending an email from Outlook via an SMTP server on a DigitalOcean droplet to a mailbox on a cPanel server and I get the 'System Administrator - Undeliverable' rejection email indicating error: 554 5.7.1 Recipient address rejected: Access denied. I suspect it is because many DO IP's are on the UCEProtect blacklist, however which log file might show confirmation?

I've searched log files /var/log/exim_rejectlog and /var/log/exim_mainlog on the recipient server but there's no entries for the test email sent, no reference to the sending server's IP. I've also looked in the mail queue on the recipient server. Where else might I be able to trace the reject reason please?
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
11,638
1,847
363
cPanel Access Level
Root Administrator
Hey there! I wouldn't expect there to be logs on the recipient server if the message was blocked at the network level. The most information you will get is likely in the bounceback message itself, so it's possible there could be more details in your own local exim_mainlog file.
 

Rachel S

Member
Apr 28, 2022
19
4
3
United States
cPanel Access Level
Website Owner
"SMTP code ""554 5.7.1"" means ""Not Allowed.""
Such error can occur if the 'Mail From' have insufficient submission rights, is invalid, or is not authorized with the authentication used.

Possible causes:
Due to Spam from your domain, the IP address has been added to a Real-Time Blacklist.

The recipient has blacklisted your domain or IP address.

How to fix the issue:
Make sure your IP address or network isn't labeled as a spam source from the outside. See the Symantec IP Reputation Investigation for more information.

Besides, you need to check commands for logs, below mentioned command may help you find the command.
The path to the primary log for Exim:

1654686322750.png

You can search this file using the ""exigrep"" utility. EX:

1654686346131.png

Also, check if the IP address or domain is blacklisted, you can check it from the MX toolbox."