Fixing 550 5.7.64 TenantAttribution; Relay Access Denied

Situation: After migrating Micrsoft tenant using Quest-on-demand, the client can’t send email to gmail with this error message:

550 5.7.64 TenantAttribution; Relay Access Denied [ValidationStatus of ‘CN=chicagotech.net’ is CertificateExpired] [AM7EUR03FT021.eop-EUR03.prod.protection.outlook.com 2023-10-05T14:05:40.792Z 08DBC59CBFCC3CE2]

Troubleshooting: When migrating Tenant, the client creates temporary certificates for Quest-on-demand on their DNS record. 

chicagotech.net. 60 IN MX 0 bt-esg-uksouth-1-1.odmad.quest-on-demand.com.

chicagotech.net. 60 IN MX 0 bt-esg-uksouth-1-2.odmad.quest-on-demand.com.

We find the quest on demand server is on the relay outbound by going to Exhange admin center under Mail flow Connectors, 

The resolution is disabling BT-IntegrationPro-Out… in Rules whch fixes the problem.

 

 

 

 

Published by

Bob Lin

Bob Lin, Chicagotech-MVP, MCSE & CNE Data recovery, Windows OS Recovery, Networking, and Computer Troubleshooting on http://www.ChicagoTech.net How to Install and Configure Windows, VMware, Virtualization and Cisco on http://www.HowToNetworking.com

Leave a Reply