Error 550 #5.1.0 Address rejected

[extern.gajda_adam]

Setting up completely new ESA I added the domain in RAT table and configured routing. There is no LDAP or SMTP call ahead configured as of now but when sending email to the email domain or even complete address configured in the RAT I'm always getting the response:

Error 550 #5.1.0 Address rejected

Is there anything which I might missed in the config?

[balaji.bandi]

Can you post the transaction log or refer below thread :

https://community.cisco.com/t5/email-security/new-domain-added-send-550-5-1-0-address-rejected-error/td-p/3045772

[extern.gajda_adam]

As I mentioned there is no SMTP call ahead configured at all so there is no need to bypass it like in the thread. Recipient domain is configured in RAT as well as complete email address. I'm searching if there is any other place in ESA which could answer "5.1.0 Address rejected" even if the complete recipient address is present in RAT table.

[extern.gajda_adam]

There is nothing more than this in mail logs:

Wed Mar 16 13:11:39 2022 Info: New CPQ ICID 616884 interface Data 1 (10.*) address 10.* reverse dns host unknown verified no

Wed Mar 16 13:11:39 2022 Info: ICID 616884 REJECT SG None match ALL SBRS not enabled country not enabled

Wed Mar 16 13:11:39 2022 Info: ICID 616884 Delayed HAT REJECT continuing session for recipient logging (10.*)

Wed Mar 16 13:11:39 2022 Info: ICID 616884 lost

Wed Mar 16 13:11:39 2022 Info: ICID 616884 close

Wed Mar 16 13:11:43 2022 Info: New SMTP ICID 616885 interface Data 2 (10.*) address 10.* reverse dns host unknown verified no

Wed Mar 16 13:11:43 2022 Info: ICID 616885 REJECT SG None match ALL SBRS not enabled country not enabled

Wed Mar 16 13:11:43 2022 Info: ICID 616885 Delayed HAT REJECT continuing session for recipient logging (10.*)

Wed Mar 16 13:11:43 2022 Info: ICID 616885 lost

Wed Mar 16 13:11:43 2022 Info: ICID 616885 close

[Octavian Szolga]

Hi,

You're matching the REJECT sender group HAT which has a reject connection behaviour in its associated mail flow policy. 

Just my 2 cents.

BR, 

Octavian

[extern.gajda_adam]

It is better now after selecting correct interface in Listener but now the error is:

550 #5.7.1 Your access to submit messages to this e-mail system has been rejected.

Any idea?

[Octavian Szolga]

Hi,

Can you please post the mail_logs events that correspond to this SMTP conversation?

Something like grep "your_ip" mail_logs and grep "ICID XXX" mail_logs ?

BR,
Octavian