Re: Exchange not receiving email from Internet



Hello Customer,

Thank you for posting here. Let's also thank John for the input.

According to your description, I understand that your exchange unable to
receive email from Internet and the sender get NDR about "You do not have
permission to send to this recipient". If I have misunderstood the problem,
please don't hesitate to let me know.

Note: The Exchange server Directory Access tab error may not related to
this mail delivery issue. Let's focus on the mail delivery issue first.

Based on my research, I suggest we try the following steps to see if we can
resolve this issue:

Step 1. Please install the following hotfix on SBS:

An NDR message occurs when a user tries to send an e-mail message through a
connector in Exchange Server 2003: "You do not have permission to send to
this recipient"
http://support.microsoft.com/?id=923495

Step 2. Please try to run the CEICW on SBS to reconfigure the Exchange:

Go through the follow KB and Rerun CEICW again carefully.

How to configure Internet access in Windows Small Business Server 2003
http://support.microsoft.com/kb/825763/en-us

Detailed steps for your reference:

a. Open Server Management.
b. Click To Do List.
c. Click Connect to the Internet.
d. Proceed to the "Firewall" page and select "Enable Firewall".
e. On the "Services Configuration" page, make sure that "E-mail" service
has been checked.
f. On the "Web Services Configuration" page, check the web services that
you want to publish.
g. On the "Web Server Certificate" page, choose "Create a new Web server
certificate" and key in your public domain name in the box.
h. On the "Internet E-mail" page, choose "Enable Internet e-mail".
i. On the "E-mail Delivery Method" page, choose DNS (Use DNS to route
e-mail) or Smart Host (Forward all e-mail to e-mail server at your ISP) to
route your email, If you select smart host, you need to input the IP
address of your smart host.
j. Key in your e-mail domain name in "Email Domain Name" page.
k. Finish the wizard.

Step 3. Please check your public MX record for the Exchange. If the MX get
wrong, the Internet mail servers unable to find your Exchange. You can
check the MX record thru the following website:

DNS Stuff
http://www.dnsstuff.com/

Step 4. Do you configured multiple SMTP domains in SBS domain? If yes,
please perform the following steps:

1. Open ESM.
2. Expand Recipients, and Recipient Policies.
3. Open the Properties page of Default Policy.
4. Right click in right pane, select New -> Recipient Policy.
5. Check E-Mail Addresses and click OK.
6. Type a name of the policy.
7. Click Modify, add the two users you want to configured to the list.
8. In E-Mail Address Policy tab, add the addition SMTP domain and set it
as primary.
9. Click OK to exit.
10. Right click the policy, and click Apply this policy new.

Also, please check "Automatically update e-mail addresses based on
recipient policy" box in ADUC so that the changes will be updated:

1. In ADUC, open the Properties page of those two users.
2. In E-mail Addresses tab, check "Automatically update e-mail addresses
based on recipient policy" box.

Moreover, you may need to update RUS following the steps below:
1. Click Recipient Update Services under Recipients node in ESM.
2. In right pane, right click each object and click Update Now.

If we cannot resolve the issue after we perform the above steps, please
help me collect some information for further investigation:

1. Please save the NDR message as .msg file and send it to me.

2. Can you telnet 25 port your Exchange from Internet?

3. Do you get any error when you run CEICW?

4. Please collect the MPS Report for Exchange:

a) Download MPSRPT_Exchange.EXE from the following link:
http://www.microsoft.com/downloads/details.aspx?familyid=cebf3c7c-7ca5-408f-
88b7-f9c79b7306c0&displaylang=en

b) Double-click the executable file to start the report gathering tool, and
then accept the end-user licensing agreement (EULA). Note Please be patient
while MPS Reports collects data. The tool may appear to stop responding
(hang) because it may take from five to 15 minutes to collect the data.

c) The tool creates a CAB file named "%COMPUTERNAME%_MPSReports_.CAB" in
the %systemroot%\MPSReports\Setup\Reports\Cab folder. The CAB file contains
the reports that the MPS Reporting Tool generated. If the tool does not
create the CAB file, copy all the files in the
%systemroot%\MPSReport\Setup\Reports folder to a compressed (zipped) file.
Note The %systemroot% folder is the folder where you installed the
operating system. By default, this is the C:\WINDOWS folder.

d) Send me the CAB file or the compressed (zipped) file at:
v-terliu@xxxxxxxxxxxxxx

For more information, please refer to the following article:
818742 Overview of the Microsoft Configuration Capture Utility (MPS_REPORTS)
http://support.microsoft.com/?id=8187423

I hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Exchange not receiving email from Internet
| thread-index: AcheHMMnUeywbccVQ/On3b/luha3Fw==
| X-WBNR-Posting-Host: 207.46.193.207
| From: =?Utf-8?B?V0lTUGF3YXk=?= <WISPaway@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <71900D01-6B30-4449-8F2A-F34BB136D99C@xxxxxxxxxxxxx>
<#FA2FgeXIHA.5396@xxxxxxxxxxxxxxxxxxxx>
| Subject: Re: Exchange not receiving email from Internet
| Date: Wed, 23 Jan 2008 16:05:00 -0800
| Lines: 46
| Message-ID: <553E6867-3BE4-45A6-ABA4-3131ECBE955C@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:88298
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| My Exchange spits back the "you do not have permission" notice. I'll have
to
| enable the notices on affected system to get that info. ExBPA doesn't see
any
| problems. Haven't looked through all the updates and what they were
proported
| to do but I'll look deeper soon. Trying a workaround with offsite mail
server
| and POP connector to buy some time. I'll come back with more info soon.
| Thanks
| --
| I knows what I knows and I wants to knows more.
|
|
| "John Oliver, Jr. [MVP]" wrote:
|
| > Any NDR fired back when trying to send to your SBS server externally?
Any
| > errors in the Event Log? Have you run ExBPA to see if it fires back
| > anything? What update do think might be causing this?
| >
| > --
| > John Oliver, Jr
| > MCSE, MCT, CCNA
| > Exchange MVP 2008
| > Microsoft Certified Partner
| >
| >
| > "WISPaway" <WISPaway@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
| > news:71900D01-6B30-4449-8F2A-F34BB136D99C@xxxxxxxxxxxxxxxx
| > > This one is starting to give me a headache.
| > > SBS 2003 Premium
| > > Issue started 1-16-08 after Windows Update(thought I turned that off)
| > > Internal email unaffected. Can send email externally.
| > > Sender receives error: You do not have permission to send to this
| > > recipient.
| > >
| > > All services seem to be running. Noticed one funny(not haha) thing.
| > > Directory Access tab under Exchange->Servers->%servername% reports
error
| > > when
| > > clicked:
| > >
| > > Information about Directory Services could not be entirely obtained.
| > >
| > > Any ideas.
| > >
| > > --
| > > I knows what I knows and I wants to knows more.
| >
| >
| >
|

.



Relevant Pages

  • RE: Cant send or receive e-mail to POP3 users on same domain--HELP!
    ... Run the CEICW and go through the Internet and firewall option. ... If you choose to forward emails to the ISP's email server (smart ... Connector for POP3 Mailboxes' option, ... The Mailbox type is User Mailbox, and select the appropriate Exchange ...
    (microsoft.public.windows.server.sbs)
  • RE: Active Sync & OWA probelms
    ... Do you installed ISA server on your ... You have enabled Require SSL on the /Exchange virtual directory. ... In the right pane, click "Connect to the Internet", and then click ... forms-based authentication is required for Exchange Server 2003 ...
    (microsoft.public.windows.server.sbs)
  • RE: Catchall not working, EXTERNALLY?
    ... When I open the connection (over internet) to my exchange account, ... the data is stored on the Exchange server side. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Exchange not receiving email from Internet
    ... Recieved email for that domain from internet. ... I understand that your exchange unable to ... permission to send to this recipient". ... The Exchange server Directory Access tab error may not related to ...
    (microsoft.public.windows.server.sbs)
  • Re: publications concerning port forwarding
    ... a postfix server in the DMZ and a MS Exchange ... services from the internet. ... The "OWA front-end in the DMZ using IPSec," comments were not on topic per ...
    (Pen-Test)