Community Discussions and Support
Can't overcome the "553 We do not relay..." error

Right, that's the preferred way to define what's local to the server. Public IP can be added as well to make it complete.

 

<p>Right, that's the preferred way to define what's local to the server. Public IP can be added as well to make it complete.</p><p> </p>

I have one iphone user who can not relay via MercS v4.74.  I have spent some time on the forum trying to figure out the problem but to no avail.  User claims to have verified authentication credentials and port, and has tried with SSL enabled and disabled.  Suggestions towards a resolution would be appreciated.

Domains in mercury.ini:

[Domains]
winserv02: dec-clt.com
DECC34: dec-clt.com

DECC34 is the hostname of the machine Mercury is running on
winserv02 is the machine on which the mailboxes reside

Here is the content of a session log:

12:11:49.603: Connection from 166.173.250.246, Mon Mar 02 12:11:49 2015<lf>
12:11:49.603: << 220 dec-clt.com ESMTP server ready.<cr><lf>
12:11:50.055: >> EHLO [10.21.98.223]<cr><lf>
12:11:50.055: << 250-dec-clt.com Hello [10.21.98.223]; ESMTPs are:<cr><lf>250-TIME<cr><lf>
12:11:50.055: << 250-SIZE 52428800<cr><lf>
12:11:50.055: << 250-AUTH CRAM-MD5 LOGIN<cr><lf>
12:11:50.055: << 250-AUTH=LOGIN<cr><lf>
12:11:50.055: << 250-STARTTLS<cr><lf>
12:11:50.055: << 250 HELP<cr><lf>
12:11:50.258: >> MAIL FROM:<johndoe@dec-clt.com><cr><lf>
12:11:50.258: << 250 Sender OK - send RCPTs.<cr><lf>
12:11:50.367: >> RCPT TO:<janedoe@twc.com><cr><lf>
12:11:50.367: << 553 We do not relay without RFC2554 authentication.<cr><lf>
12:11:50.461: >> RCPT TO:<johndoe@dec-clt.com><cr><lf>
12:11:50.461: << 250 Recipient OK - send RCPT or DATA.<cr><lf>
12:11:50.554: >> QUIT<cr><lf>
12:11:50.554: << 221 dec-clt.com Service closing channel.<cr><lf>
12:11:50.554: --- Connection closed normally at Mon Mar 02 12:11:50 2015. ---
12:11:50.554: 

&lt;p&gt;I have one iphone user who can not relay via MercS v4.74.&amp;nbsp; I have spent some time on the forum trying to figure out the problem but to no avail.&amp;nbsp; User claims to have verified authentication credentials and port, and has tried with SSL enabled and disabled.&amp;nbsp; Suggestions towards a resolution would be appreciated. &lt;/p&gt;&lt;p&gt;Domains in mercury.ini:&lt;/p&gt;&lt;p&gt;[Domains] winserv02: dec-clt.com DECC34: dec-clt.com &lt;/p&gt;&lt;p&gt;DECC34 is the hostname of the machine Mercury is running on winserv02 is the machine on which the mailboxes reside &lt;/p&gt;&lt;p&gt;Here is the content of a session log: &lt;/p&gt;&lt;p&gt;12:11:49.603: Connection from 166.173.250.246, Mon Mar 02 12:11:49 2015&amp;lt;lf&amp;gt; 12:11:49.603: &amp;lt;&amp;lt; 220 dec-clt.com ESMTP server ready.&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 12:11:50.055: &amp;gt;&amp;gt; EHLO [10.21.98.223]&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 12:11:50.055: &amp;lt;&amp;lt; 250-dec-clt.com Hello [10.21.98.223]; ESMTPs are:&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt;250-TIME&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 12:11:50.055: &amp;lt;&amp;lt; 250-SIZE 52428800&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 12:11:50.055: &amp;lt;&amp;lt; 250-AUTH CRAM-MD5 LOGIN&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 12:11:50.055: &amp;lt;&amp;lt; 250-AUTH=LOGIN&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 12:11:50.055: &amp;lt;&amp;lt; 250-STARTTLS&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 12:11:50.055: &amp;lt;&amp;lt; 250 HELP&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 12:11:50.258: &amp;gt;&amp;gt; MAIL FROM:&amp;lt;johndoe@dec-clt.com&amp;gt;&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 12:11:50.258: &amp;lt;&amp;lt; 250 Sender OK - send RCPTs.&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 12:11:50.367: &amp;gt;&amp;gt; RCPT TO:&amp;lt;janedoe@twc.com&amp;gt;&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 12:11:50.367: &amp;lt;&amp;lt; 553 We do not relay without RFC2554 authentication.&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 12:11:50.461: &amp;gt;&amp;gt; RCPT TO:&amp;lt;johndoe@dec-clt.com&amp;gt;&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 12:11:50.461: &amp;lt;&amp;lt; 250 Recipient OK - send RCPT or DATA.&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 12:11:50.554: &amp;gt;&amp;gt; QUIT&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 12:11:50.554: &amp;lt;&amp;lt; 221 dec-clt.com Service closing channel.&amp;lt;cr&amp;gt;&amp;lt;lf&amp;gt; 12:11:50.554: --- Connection closed normally at Mon Mar 02 12:11:50 2015. --- 12:11:50.554:&amp;nbsp; &lt;/p&gt;

The client apparently makes no attempt to authenticate, so there is some client setting that isn't correct.

As for domains it should make little difference in this case. winserv02 isn't needed at all, but the declaration for DECC34 should preferably be extended with hostname (DECC34: DECC34) and IP address within brackets.

&lt;p&gt;The client apparently makes no attempt to authenticate, so there is some client setting that isn&#039;t correct.&lt;/p&gt;&lt;p&gt;As for domains it should make little difference in this case.&amp;nbsp;winserv02 isn&#039;t needed at all, but the declaration for DECC34 should preferably be extended with hostname (&lt;span style=&quot;font-size: 13.3333330154419px;&quot;&gt;DECC34:&amp;nbsp;&lt;/span&gt;&lt;span style=&quot;font-size: 13.3333330154419px;&quot;&gt;DECC34) and IP address within brackets.&lt;/span&gt;&lt;/p&gt;

Thanks Rolf.  Just to be clear, domains should look like the following?

[Domains]
DECC34 : dec-clt.com
DECC34 : DECC34
DECC34 : [192.168.0.12]

As for authentication, I will have the user bring his phone to me to review the settings.

&lt;p&gt;Thanks Rolf.&amp;nbsp; Just to be clear, domains should look like the following?&lt;/p&gt;&lt;p&gt;[Domains] DECC34 : dec-clt.com DECC34 : DECC34 DECC34 : [192.168.0.12]&lt;/p&gt;&lt;p&gt;As for authentication, I will have the user bring his phone to me to review the settings. &lt;/p&gt;
live preview
enter atleast 10 characters
WARNING: You mentioned %MENTIONS%, but they cannot see this message and will not be notified
Saving...
Saved
With selected deselect posts show selected posts
All posts under this topic will be deleted ?
Pending draft ... Click to resume editing
Discard draft