NDR- My issue or theirs?

I have a user getting the following NDR from our mail server, when 
attempting to reply to a specific email:

"The following recipient(s) could not be reached:
'External User' on 16/09/2005 3:39 PM
The recipient could not be processed because it would violate the security 
policy in force
<smtp.mydomain.com #5.7.0 smtp;550 5.7.0 Detected a signature used in spam 
traffic (code:C-3995). Resend in 36 hours or contact the domain's 
postmaster.>"

I don't think we have any outbound policies in place that should be blocking 
this.  I saw an MSKB article that talked about issues with TLS, but we don't 
have TLS enabled (and the error message in the KB article didn't say 
anything about a "signature used in spam traffic".  Google comes up with 
zero on "code:C-3995".  Anyone seen this before?

Thanks,

Phil

Exchange 2003 SP1 on Windows Server 2003 SP1


0
9/19/2005 3:18:05 PM
exchange.admin 57650 articles. 1 followers. Follow

4 Replies
528 Views

Similar Articles

[PageSpeed] 1

Phil,

Although the NDR is generated by your email server, it is because the 
receiving end declined to accept your message. Check if your IP address 
is not black listed in any public RBL servers. Go to 
http://aboutmydns.com and run the Blacklist test




Phil McNeill wrote:
> I have a user getting the following NDR from our mail server, when 
> attempting to reply to a specific email:
> 
> "The following recipient(s) could not be reached:
> 'External User' on 16/09/2005 3:39 PM
> The recipient could not be processed because it would violate the security 
> policy in force
> <smtp.mydomain.com #5.7.0 smtp;550 5.7.0 Detected a signature used in spam 
> traffic (code:C-3995). Resend in 36 hours or contact the domain's 
> postmaster.>"
> 
> I don't think we have any outbound policies in place that should be blocking 
> this.  I saw an MSKB article that talked about issues with TLS, but we don't 
> have TLS enabled (and the error message in the KB article didn't say 
> anything about a "signature used in spam traffic".  Google comes up with 
> zero on "code:C-3995".  Anyone seen this before?
> 
> Thanks,
> 
> Phil
> 
> Exchange 2003 SP1 on Windows Server 2003 SP1
> 
> 
0
db828 (65)
9/19/2005 4:25:56 PM
Thanks,

Thinking it was them not accepting my mail, I had actually checked SPAMCOP 
and DNSBL but didn't know there was a spot I could go to check them all in 
one shot.  Handy.  Anyway, I passed on all services, which I was pretty sure 
I would.  So is this most likely a local configuration issue on their end? 
I am not getting any other reports of undeliverable mail of this type.

Thanks,

Phil


"Dennis Black" <db@dbnospam.com> wrote in message 
news:OKxCTaTvFHA.708@TK2MSFTNGP10.phx.gbl...
> Phil,
>
> Although the NDR is generated by your email server, it is because the 
> receiving end declined to accept your message. Check if your IP address is 
> not black listed in any public RBL servers. Go to http://aboutmydns.com 
> and run the Blacklist test
>
>
>
>
> Phil McNeill wrote:
>> I have a user getting the following NDR from our mail server, when 
>> attempting to reply to a specific email:
>>
>> "The following recipient(s) could not be reached:
>> 'External User' on 16/09/2005 3:39 PM
>> The recipient could not be processed because it would violate the 
>> security policy in force
>> <smtp.mydomain.com #5.7.0 smtp;550 5.7.0 Detected a signature used in 
>> spam traffic (code:C-3995). Resend in 36 hours or contact the domain's 
>> postmaster.>"
>>
>> I don't think we have any outbound policies in place that should be 
>> blocking this.  I saw an MSKB article that talked about issues with TLS, 
>> but we don't have TLS enabled (and the error message in the KB article 
>> didn't say anything about a "signature used in spam traffic".  Google 
>> comes up with zero on "code:C-3995".  Anyone seen this before?
>>
>> Thanks,
>>
>> Phil
>>
>> Exchange 2003 SP1 on Windows Server 2003 SP1
>> 

0
9/19/2005 4:40:54 PM
Phil McNeill wrote:
> So is this most likely a local configuration issue on their end?

Trigger-happy spam filtering -- whether it is a problem or a feature can be 
debated. :)

Besides the blacklists you've already checked, there are two other things to 
look at:

1) The reverse lookup for the public IP address of your mail server should 
work, name returned by it should resolve to the same IP in forward lookup, 
and should also match up with a MX record for your domain.  Many sites 
insist on some or all of the above, as a spam-blocking measure.

2) Some spam filters are triggered by content (keywords, links).  Have the 
user send a short test message and see if that goes through.


-- 
Chris Priede (priede@panix.com) 


0
priede (14)
9/19/2005 5:30:02 PM
"Chris Priede" <priede@panix.com> wrote in message 
news:OVtFE$TvFHA.3688@tk2msftngp13.phx.gbl...
> Phil McNeill wrote:
>> So is this most likely a local configuration issue on their end?
>
> Trigger-happy spam filtering -- whether it is a problem or a feature can 
> be debated. :)
>
> Besides the blacklists you've already checked, there are two other things 
> to look at:
>
> 1) The reverse lookup for the public IP address of your mail server should 
> work, name returned by it should resolve to the same IP in forward lookup, 
> and should also match up with a MX record for your domain.  Many sites 
> insist on some or all of the above, as a spam-blocking measure.
>
> 2) Some spam filters are triggered by content (keywords, links).  Have the 
> user send a short test message and see if that goes through.
>
>
> -- 
> Chris Priede (priede@panix.com)

Thanks Chris.  I think it is most likely one of those two things.  We'll 
follow your suggestions.

Thanks! 


0
9/19/2005 5:45:45 PM
Reply:

Similar Artilces:

Bordering issue- master or apply all?
Hi I am working on one large spreadsheet so I was wondering if there was way to create a border around each page without having to do i manually for every page?? Is their some sort of master view o something along those lines? Thanks -- Message posted from http://www.ExcelForum.com Hi AFAIK this is not possible within Excel -- Regards Frank Kabel Frankfurt, Germany "jkb724 >" <<jkb724.19r909@excelforum-nospam.com> schrieb im Newsbeitrag news:jkb724.19r909@excelforum-nospam.com... > Hi > > I am working on one large spreadsheet so I was wondering if there ...

Stopping NDR's
Is there away to stop NDR's for users that no longer exist in Exchange 2000, and also keep the "Bad Mail" folder from filling up? Thanks Brad Create an Emtpy Distribution List with no members. Add the ex-employee email address to the DL list. They will simply disappear. For the Bad Mail, you can write a simple batch file to purge or delete the folder. -- John Oliver, Jr. MCSE, MCT, CCNA, Exchange MVP Microsoft Certified Partner "Brad" <anonymous@discussions.microsoft.com> wrote in message news:057a01c3d3e0$48730b60$a101280a@phx.gbl... > Is there away ...

Inetinfo issue
Hello all, I have Windows 2003 STD edition x86 server running Exchange 2003 ENT edition server with SP1. I have Trend Micro ScanMai for Exchange installed. Inetinfo consumes about 85% of CPU all time and sometime tmes 90-95%. I haven't been succesfull in fixing it and I am assuming somebody out there had the same issue. Soem of the stuff I have done so far are: 1. Turned off anti virus 2. Turned off anti virus background scanning from registry. 3. Upgraded to SP2. Still no luck. Please shed some light on this issue. Thanks TSAM <TSAM@discussions.microsoft.com> wrote: >...

Public Folders Issue #2
I have Windows Server 2003 SP1 Domain Controller (Native Mode), another server with Exchange 2003 SP1 (Native mode as well, Windows Server 2003 SP1). I have one mailbox store, and one public store for the PF tree. All users can read their mail, but they can't access the Public Folders from their Outlook 2003 SP1 client. Though, they can access the PF from the OWA. Any ideas? Thanks is advance, Guy Rozendorn guy@rozendorn.ath.cx On Wed, 13 Jul 2005 09:28:02 -0700, "??? ????????" <guy.rozendorn@gmail.com> wrote: >I have Windows Server 2003 SP1 Domain Controller (Nat...

NDR ?
I get one of the following messages whenever I try to send messages to certain recipients: The following recipient(s) could not be reached: 'betsy@xyz.com' on 4/12/04 9:39 AM The recipient name is not recognized The MTS-ID of the original message is: c=US;a=PRIMARY;p=ELLIST;l=HERAD-040412133844Z-433 ------------------------------------------------- The following recipient(s) could not be reached: 'adam@abc.com' on 3/25/2004 1:53 PM Unable to deliver the message due to a communications failure The MTS-ID of the original message is: c=US;a=PRIMARY;p=ELLIST;l=HERAD-040325185233...

Front end login issues
we just upgraded with VAR from 7.5 to 8.0, now some, say 10% of users get an error on login to the Business Portal. They get "enter in the credentials" or "a script erro on the page. ...

Concurrency Issues
I have a situation were i create dynamic objects and each of them use the same class(and set of functions in it) to do certain task. To handle the concurrency issues that may arise while calling same functions at a time - what are the best solutions? Is making the function Inline suitable in this scenario in any manner ? regards, XX xx wrote: > I have a situation were i create dynamic objects and each of them use > the same class(and set of functions in it) to do certain task. To > handle the concurrency issues that may arise while calling same > functions at a time - what ar...

sync issues 2007
11:27:44 Microsoft Exchange offline address book 11:27:44 Not downloading Offline address book files. A server (URL) could not be located. 11:27:44 0X8004010F getting the error every hour in outlook 2003/2007 i've checked and the message store has the right OAB location, any ideas ? cheers mark Check my blog, I cover this.. (entry Apr 21st) http://peterodowd.blogspot.com Cheers -- Peter O'Dowd Exchange Server MVP http://www.blade.net.nz "luna" <luna_s@themoon.com> wrote in message news:nuqdnbZDGqZFQLDbRVnyvg...

SBS2003 Exchange issue
When trying to connect to the mailboxes from Outlook 2003, I am getting strange errors such as "unable to conenct with exchange server". I went and checked on the properties of the new users and when I go to the "Properties" then the "Exchange Advanced" tab, then the "Mailbox Rights" I get: "The operation could not be completed because the store is not mounted" ID no: c1041732 Microsoft Active Directory - Exchange Extension ----and----- When I try and connect to the OWA I get this: HTTP/1.1 503 Service Unavailable The weird thing is that ...

Outlook 2003 viewing email issue
Does anyone know if it is possible to view my email inbox within the outlook Today screen ? Ideally I would like to be able to see my calendar , task list and current emails all within the same screen ? Alternatively if this isn't possible , can the 'read pane' within the email section of Outlook be turned off and replaced with the task list to achieve the same objective but in a differnet way ? many thanks Rob Rob Moore <anonymous@discussions.microsoft.com> wrote: > Does anyone know if it is possible to view my email inbox > within the outlook Today screen ?...

Printing Issue
When I print there used to be a line gap between the subject and body of the message. Now the body is right under the subject with no gap. Does not appear to be the printer as it is printing fine from a desktop using the same printer. Looked through all the settings and could not find anything meaningful. Any help would be great. ...

NDR
Have a remote user who connects to LAN via VPN, using XP professional and Office XP small business. Email worked fine yesterday but now user cannot send mail, gets following error message: Your message did not reach some or all of the intended recipients. Subject: RE: test Sent: 10/16/2003 11:44 AM The following recipient(s) could not be reached: recipients name on 10/16/2003 11:44 AM None of your e-mail accounts could send to this recipient. User can receive email without any problems. I cannot find this in the knowledge base so any help would be g...

Unique user reports people are getting NDR's when sending him messages within my organization
Strange behavior. About 5 users report that sending messages to "Smith, John" (a valid user in my organization) returns an NDR. I attempted to send message to "Smith, John" and it works fine. I noticed that users who complain messages are failing are housed in the same Mailbox Store, Storage and Exchange server than John, Smith. I attempted to track message below using Messaging Tracking center but no results were returned. Please advise how can I troubleshoot this ? What this error could be ? From: System Administrator Sent: Monday, November 07, 2005 7:28 AM T...

ADC cleanup issues
Before I burn a support case with Microsoft, I thought I'd ask this question here. We are in the middle of our Exchange 5.5 -> Exchange 2003 (and AD) migration. We're running ADMT to pull over the NT accounts (SIDs etc.) and running the ADC to connect their email to the appropriate accounts. *most* of this went just fine, but we did find a few strange things. One is a user who was on a different Exchange server at one point during the process that was moved to another server. Our security group didn't just delete the previous account, but hid it. The hidden account ended u...

Excel formatting issues
Version: 2008 Operating System: Mac OS X 10.5 (Leopard) Processor: Intel Recently I have started having problems with excel not displaying the correct format. For instance I format the cell for currency and the number doesn't change to currency. Also, don't remember having the zero value problem before-numbers starting with zero not showing the Zero. It almost like I have some kind of bug or something. I have the latest update v 12.2.3 any suggestions? > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may no...

Cannot open original message in NDR
Hello, When I receive a NDR I cannot open the original message in Outlook 2003. When I use Outlook Express I can open and view the original message. What do I have to do to see the original message in Outlook 2003? Kind regards: Emiel Kempen. what's NDR? nntp://msnews.microsoft.com/microsoft.public.outlook/<OcPrtbI0EHA.1392@TK2MSFTNGP14.phx.gbl> Hello, When I receive a NDR I cannot open the original message in Outlook 2003. When I use Outlook Express I can open and view the original message. What do I have to do to see the original message in Outlook 2003? ...

Saving workbook with a trusted extenstion VBA issue
Good afternoon, I wonder if anyone could help me with this. I have a code that is exporting several sheets from a workbook and saving them as a new workbook with a name that the user specifies with in an input box. It works perfectly, well almost. My problem is that when I try to open this newly created workbook, I get the following warning: "The file you are trying to open, "xxx.xls" is in a different format than specified by the extension..... Do you want to open the file now? It opens fine, and appears as if all the data is there, but I would really like...

NDR's and Virus's
I recieved a e-mail from my T-1 provider stating "A host (my domain ip) within your IP block appears to be the source of an email containing the virus: Worm.Sober.U. The email address listed in the from field in messages sent by most viruses is generally spoofed. Please ensure that your mail server is not sending a virus notification or NDR (non delivery report) to this address as these methods can be used directly or indirectly to propagate email viruses." I have determined that it is indeed a NDR report being generated causing the issue. I also notice that when I do a ...

DNS and SMTP Issues
We are about to deploy our new Exchange Server 2003, but we are currently having problems with inbound emails. We can send email internally and externally with no problems. Here is our setup right now: 1.. Windows Server 2003 running the FIRST Domain Controller with the Active Directory Integrated DNS. It is also our DHCP and WINS servers. It has a private IP (10.x.x.A) 2.. Windows Server 2003 running another DC, Exchange Server 2003 and AD Integrated DNS (Replication from the first DC). This has a public IP (2xx.xx.xxx.B). 3.. Windows Server 2003 running as a member server with a sec...

Currency Issue in GP10
Whenever I set a currency id (Z-US$) into iv00105, it created a extra item when I open item maintenance. itemnmbr curncyid currnidx decplcur listprice dex_row_id ItemA 0 6 .00000 29178 ItemA Z-US$ 1007 5 .00000 29177 The reason I have to set currency id. I always get error when PO import from RMS. "Unit Cost Calculation does not match out to Extended Cost " OR "CURNCYID does not match CURNCYID on the Purchase Order" To Fix the "Unit Cost Calculation does not match out...

OOO and NDR Security Risk Solutions
Hi, I'd like to enable NDRs and external OOO messages, which have been disabled by the previous IT Manager, but I am aware of the potential security risks. Can someone please recommend security tools which help prevent some of these risks? Thanks, Matt I know that guns kill people. Can someone recommend a gun that doesn't kill people as much? -- Ed Crowley MVP - Exchange "Protecting the world from PSTs and brick backups!" <mlaufer@srg.com> wrote in message news:1160520993.355412.165180@b28g2000cwb.googlegroups.com... > Hi, > > I'd like to enable N...

E2k3 NDR's
Hi folks, This is a silly one I know, but is there a way of collecting alls messages for domain to one mailbox without sending an NDR where the name came not be found. IE user John@123.com will receive mail direct to John, but Daivd will receive all other mail to @123.com without entering all the different names. Want I want is a catch all. Thanks in advance Stephen Why dont you try the "forward all unresolved" recipients to host on the SMTP virtual server. If you use a windows 2000 SMTP service as the forwarding server, the messages can go into the DROP directory. "...

Decimal point/comma issue
If use a VBA form to fill out data which sometimes have a decimal separator. In Europe the comma is used as a decimal sign. However when I use a comma the value is interpreted as a text when the macro places the value in the spreadsheet. Only when I use the decimal point in the VBA form, the value is accepted as a value in the spreadsheet. Does this have to to with the MS Window settings or is it releated to my english Excel version? How can a prevent this problem without going into VBA code to tackle it? Thanks in advance Jan Bart You hit it. You're trying to use European data in a...

VCard issue #2
This is a weird problem, but when I send a vcard to someone, it shows up in my sent items as a vcf file, and has a vcard icon on it, but when the recipient gets the VCard, it shows up as msg file, with an envelope icon as the attachment. When I open it, nothing is there - it's empty. I can't find anything regarding this problem on google or MS's website. Anybody have any ideas? Is it a problem with Outlook? Do I need to do a detect and repair, a reinstallation? Thanks for your help! Does the same happen when you send a message to yourself? Is he/she able to see it w...

MS Money Plus Deluxe
I just installed the above product and am working to understand MS Money from MS Money 2002 that I had previously. I imported all the transactions but seem to see an odd issue. I have a payee called Finance Charge... on the payee report I see on a few days where the same transaction will show up twice Foe example on 11/29 it will show $11.52 twice one entry when I double click on it as "downloaded" and one asd "reconciled" yet when I go into the transactions I only see one. Since it shows two entries the report is incorrect. Any ideas? Thanks, Jeff ...