Forum Discussion
Email issues after adding new domain
- Nov 20, 2021Best run some message traces, they should give you a clue as to what's happening: https://docs.microsoft.com/en-us/exchange/monitoring/trace-an-email-message/message-trace-modern-eac
Also, make sure that you have configured SPF for your domain as a minimum, and preferably DKIM/DMARC as well. https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/set-up-spf-in-office-365-to-help-prevent-spoofing?view=o365-worldwide
Also, make sure that you have configured SPF for your domain as a minimum, and preferably DKIM/DMARC as well. https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/set-up-spf-in-office-365-to-help-prevent-spoofing?view=o365-worldwide
- caperson1976Nov 20, 2021Copper Contributor
VasilMichev These are the most common NDRs that I found...
550 5.4.316 Message expired, connection refused, Socket error code 10061
554 5.7.1 [CS01] Message rejected due to local policy. Please visit https://support.apple.com/en-us/HT204137
550 5.1.0 550 #5.1.0 Address rejected
I have looked each one of these up and they all appear to be a recipient side issue, whereas the recipient's "IT" needs to add our email address(es) or domain to their allow/white list. These issues were not happening with the initial domain that was setup. I added the new domain directly through the M 365 Admin Center and all required DNS Records were created automatically and are showing as Healthy or OK. The only good thing here is that it's not happening for every client, only just a select few at this time.
Any additional ideas/thoughts on this matter?
Thank you in advance.
- caperson1976Nov 20, 2021Copper Contributor
Thanks for your response. I did run traces before, but I ran them again so I could pull the errors I am seeing. These are the common errors...
550 5.4.316 Message expired, connection refused, Socket error code 10061
554 5.7.1 [CS01] Message rejected due to local policy. Please visit https://support.apple.com/en-us/HT204137
550 5.1.0 550 #5.1.0 Address rejected
They all lead me to believe the issue is in fact on the recipients side but i'm not sure WHY these emails are being flagged. When I created the new domain, I did it directly from within the 365 Admin Center and it is currently showing that everything is good to go (Healthy or OK). Not sure what else to check after this.
Additional ideas/thoughts?
- VasilMichevNov 23, 2021MVPCheck SPF/DKIM/DMARC records as per the article above and the references therein.