553 5.1.8 domain of sender does not exist

Discuss the Scalix Server software
ebhannes
Posts: 118
Joined: Fri Feb 22, 2008 9:51 am

553 5.1.8 domain of sender does not exist

Postby ebhannes » Thu Feb 15, 2018 8:31 am

Hi,

today a colleague was unable to receive mail from account-security-noreply@accountprotection.microsoft.com. Except another obvious spam address any other domains is working fine.
I was getting a NDN:

Code: Select all

553 5.1.8 <account-security-noreply@accountprotection.microsoft.com>... Domain of sender address account-security-noreply@accountprotection.microsoft.com does not exist
Action: failed
Status: 5.3.0
x-scalix-Reason-Code: 5

i used check_mail within sendmail:

Code: Select all

mailserver:~ # echo "check_mail account-security-noreply@accountprotection.microsoft.com" | sendmail -d8.20 -bt
ADDRESS TEST MODE (ruleset 3 NOT automatically invoked)
Enter <ruleset> <address>
> check_mail         input: account-security-noreply @ accountprotection . microsoft . com
Basic_check_mail   input: account-security-noreply @ accountprotection . microsoft . com
tls_client         input: $| MAIL
TLS_connection     input:
TLS_connection   returns:
tls_client       returns:
CanonAddr          input: < account-security-noreply @ accountprotection . microsoft . com >
canonify           input: < account-security-noreply @ accountprotection . microsoft . com >
Canonify2          input: account-security-noreply < @ accountprotection . microsoft . com >
dns_getcanonname(accountprotection.microsoft.com, trymx=1)
dns_getcanonname: trying accountprotection.microsoft.com. (A)
        YES
dns_getcanonname: trying mail.msa.msidentity.com. (A)
        NO: errno=0, h_errno=1
dns_getcanonname: trying mail.msa.msidentity.com. (A)
        NO: errno=0, h_errno=1
Canonify2        returns: account-security-noreply < @ accountprotection . microsoft . com >
canonify         returns: account-security-noreply < @ accountprotection . microsoft . com >
Parse0             input: account-security-noreply < @ accountprotection . microsoft . com >
Parse0           returns: account-security-noreply < @ accountprotection . microsoft . com >
CanonAddr        returns: account-security-noreply < @ accountprotection . microsoft . com >
Basic_check_mail returns: $# error $@ 5 . 1 . 8 $: "553 Domain of sender address " " does not exist"
check_mail       returns: $# error $@ 5 . 1 . 8 $: "553 Domain of sender address " " does not exist"

and doublechecked with a random known domain, which was successful.

Tried dig and nslookup:

Code: Select all

mailserver:~ # dig accountprotection.microsoft.com
; <<>> DiG 9.9.6-P1 <<>> accountprotection.microsoft.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11181
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4000
;; QUESTION SECTION:
;accountprotection.microsoft.com. IN    A

;; ANSWER SECTION:
accountprotection.microsoft.com. 2347 IN CNAME  mail.msa.msidentity.com.

;; Query time: 19 msec
;; SERVER: 192.168.2.50#53(192.168.2.50)
;; WHEN: Thu Feb 15 12:52:11 CET 2018
;; MSG SIZE  rcvd: 94

mailserver:~ # nslookup -querytype=mx accountprotection.microsoft.com
Server:         192.168.2.50
Address:        192.168.2.50#53

Non-authoritative answer:
accountprotection.microsoft.com canonical name = mail.msa.msidentity.com.
mail.msa.msidentity.com mail exchanger = 5 mx1.hotmail.com.
mail.msa.msidentity.com mail exchanger = 5 mx2.hotmail.com.
mail.msa.msidentity.com mail exchanger = 5 mx3.hotmail.com.
mail.msa.msidentity.com mail exchanger = 5 mx4.hotmail.com.
mail.msa.msidentity.com mail exchanger = 10 accountprotection-microsoft-com.mail.protection.outlook.com.

Authoritative answers can be found from:
mx1.hotmail.com internet address = 65.55.92.184
mx1.hotmail.com internet address = 65.55.92.136


mxtoolbox.com doesn't show any, in my opinion relevant error for the domain accountprotection.microsoft.com.
Does someone know, what is going wrong?

regards
Hannes

ScalixSupport
Scalix
Scalix
Posts: 5494
Joined: Thu Mar 25, 2004 8:15 pm

Re: 553 5.1.8 domain of sender does not exist

Postby ScalixSupport » Tue Mar 13, 2018 11:46 am

Hello,

it seems issue with DNS, maybe there are some protected DMZ
I can't ping to accountprotection.microsoft.com
# ping accountprotection.microsoft.com
ping: unknown host accountprotection.microsoft.com

but host is resolvable:
# host accountprotection.microsoft.com
accountprotection.microsoft.com is an alias for mail.msa.msidentity.com.
mail.msa.msidentity.com mail is handled by 5 mx1.hotmail.com.
mail.msa.msidentity.com mail is handled by 5 mx3.hotmail.com.
mail.msa.msidentity.com mail is handled by 10 accountprotection-microsoft-

com.mail.protection.outlook.com.
mail.msa.msidentity.com mail is handled by 5 mx4.hotmail.com.
mail.msa.msidentity.com mail is handled by 5 mx2.hotmail.com.
Regards,
Scalix Support Team

ebhannes
Posts: 118
Joined: Fri Feb 22, 2008 9:51 am

Re: 553 5.1.8 domain of sender does not exist

Postby ebhannes » Wed Mar 14, 2018 4:21 am

Hi,

minutes ago check_mail returns corrcet domain:

Code: Select all

mailserver:~ # echo "check_mail account-security-noreply@accountprotection.microsoft.com" | sendmail -d8.20 -bt
ADDRESS TEST MODE (ruleset 3 NOT automatically invoked)
Enter <ruleset> <address>
> check_mail         input: account-security-noreply @ accountprotection . microsoft . com
Basic_check_mail   input: account-security-noreply @ accountprotection . microsoft . com
tls_client         input: $| MAIL
TLS_connection     input:
TLS_connection   returns:
tls_client       returns:
CanonAddr          input: < account-security-noreply @ accountprotection . microsoft . com >
canonify           input: < account-security-noreply @ accountprotection . microsoft . com >
Canonify2          input: account-security-noreply < @ accountprotection . microsoft . com >
dns_getcanonname(accountprotection.microsoft.com, trymx=1)
dns_getcanonname: trying accountprotection.microsoft.com. (A)
        YES
dns_getcanonname: trying mail.msa.msidentity.com. (A)
        NO: errno=0, h_errno=4
dns_getcanonname: trying mail.msa.msidentity.com. (MX)
        YES
dns_getcanonname: mail.msa.msidentity.com
Canonify2        returns: account-security-noreply < @ mail . msa . msidentity . com . >
canonify         returns: account-security-noreply < @ mail . msa . msidentity . com . >
Parse0             input: account-security-noreply < @ mail . msa . msidentity . com . >
Parse0           returns: account-security-noreply < @ mail . msa . msidentity . com . >
CanonAddr        returns: account-security-noreply < @ mail . msa . msidentity . com . >
dns_getcanonname(mail.msa.msidentity.com, trymx=1)
dns_getcanonname: trying mail.msa.msidentity.com. (A)
        NO: errno=0, h_errno=4
dns_getcanonname: trying mail.msa.msidentity.com. (MX)
        YES
dns_getcanonname: mail.msa.msidentity.com
Basic_check_mail returns: @ account-security-noreply < @ mail . msa . msidentity . com >
check_mail       returns: @ account-security-noreply < @ mail . msa . msidentity . com >

No changes on my side. Odd.


Return to “Scalix Server”



Who is online

Users browsing this forum: No registered users and 1 guest