From: Rich Matheisen [MVP] on
On Wed, 16 Jun 2010 11:30:09 -0700, ed <ed(a)discussions.microsoft.com>
wrote:

[ snip ]

>> If the appliance is rejecting the address as invalid then it never
>> reaches the Exchange servers.
>
>the appliance checks the domain controllers and now, I bypassed LDAP check
>on the appliance. But, when I send emails from yahoo.com to users at company
>B with @ab.com, I got the userb(a)ab.com bounced by destination server. Reason:
>5.1.0 - Unknown address error ('550', ['5.1.1 User unknown'])
>
>What might I miss?

If you get the same error then I'd say that the address isn't in the
directory you're using.

Try using LDP.exe and the ldap query
"proxyaddresses=smtp:userb(a)ab.com" and see if you find the user. Make
sure you query a GC in the same domain that your appliance does.

[ snip ]


>Method 2 works beautifully now with your help.
>
>Is there a way to add the secondary SMTP address globally for all other
>company's contacts with @ab.com?
>
>About GAL sync, I followed this link
>http://msmvps.com/blogs/clustering/archive/2004/10/06/15141.aspx but no
>contacts imported. When I ran the export, all statistics are shown as "0".
>What might I miss?

This newsgroup was supposed to be shut down by MS on June 1st. I'd
suggest that you ask this question in the TechNet forums that MS seems
to think are superior to newsgroups.

http://social.technet.microsoft.com/Forums/en-us/categories/

The software isn't tied to Exchange so you'd probably be better off
asking in a forum for Active Directory.
---
Rich Matheisen
MCSE+I, Exchange MVP
From: ed on
Rich,

Thank you.

> >> If the appliance is rejecting the address as invalid then it never
> >> reaches the Exchange servers.
> >
> >the appliance checks the domain controllers and now, I bypassed LDAP check
> >on the appliance. But, when I send emails from yahoo.com to users at company
> >B with @ab.com, I got the userb(a)ab.com bounced by destination server. Reason:
> >5.1.0 - Unknown address error ('550', ['5.1.1 User unknown'])
> >
> >What might I miss?
>
> If you get the same error then I'd say that the address isn't in the
> directory you're using.
>
> Try using LDP.exe and the ldap query
> "proxyaddresses=smtp:userb(a)ab.com" and see if you find the user. Make
> sure you query a GC in the same domain that your appliance does.
>

The user is not in our AD and this user is in company B. If user is not in
our AD, it should use SMTP connector for ab.com (SMTP sharing space) to route
users at company B(SMTP connector for ab.com -unathoriative are configured at
both company and check the box "allow relay to...")
When I trace the message, the appliance finished all checks and start to
deliver the message to our exchange server and failed with that error. Why
did exchange use the SMTP connector to route message to userB at company B?

Thank you.

"Rich Matheisen [MVP]" wrote:

> On Wed, 16 Jun 2010 11:30:09 -0700, ed <ed(a)discussions.microsoft.com>
> wrote:
>
> [ snip ]
>
> >> If the appliance is rejecting the address as invalid then it never
> >> reaches the Exchange servers.
> >
> >the appliance checks the domain controllers and now, I bypassed LDAP check
> >on the appliance. But, when I send emails from yahoo.com to users at company
> >B with @ab.com, I got the userb(a)ab.com bounced by destination server. Reason:
> >5.1.0 - Unknown address error ('550', ['5.1.1 User unknown'])
> >
> >What might I miss?
>
> If you get the same error then I'd say that the address isn't in the
> directory you're using.
>
> Try using LDP.exe and the ldap query
> "proxyaddresses=smtp:userb(a)ab.com" and see if you find the user. Make
> sure you query a GC in the same domain that your appliance does.
>
> [ snip ]
>
>
> >Method 2 works beautifully now with your help.
> >
> >Is there a way to add the secondary SMTP address globally for all other
> >company's contacts with @ab.com?
> >
> >About GAL sync, I followed this link
> >http://msmvps.com/blogs/clustering/archive/2004/10/06/15141.aspx but no
> >contacts imported. When I ran the export, all statistics are shown as "0".
> >What might I miss?
>
> This newsgroup was supposed to be shut down by MS on June 1st. I'd
> suggest that you ask this question in the TechNet forums that MS seems
> to think are superior to newsgroups.
>
> http://social.technet.microsoft.com/Forums/en-us/categories/
>
> The software isn't tied to Exchange so you'd probably be better off
> asking in a forum for Active Directory.
> ---
> Rich Matheisen
> MCSE+I, Exchange MVP
> .
>
From: Rich Matheisen [MVP] on
On Thu, 17 Jun 2010 10:19:51 -0700, ed <ed(a)discussions.microsoft.com>
wrote:

>Rich,
>
>Thank you.
>
>> >> If the appliance is rejecting the address as invalid then it never
>> >> reaches the Exchange servers.
>> >
>> >the appliance checks the domain controllers and now, I bypassed LDAP check
>> >on the appliance. But, when I send emails from yahoo.com to users at company
>> >B with @ab.com, I got the userb(a)ab.com bounced by destination server. Reason:
>> >5.1.0 - Unknown address error ('550', ['5.1.1 User unknown'])
>> >
>> >What might I miss?
>>
>> If you get the same error then I'd say that the address isn't in the
>> directory you're using.
>>
>> Try using LDP.exe and the ldap query
>> "proxyaddresses=smtp:userb(a)ab.com" and see if you find the user. Make
>> sure you query a GC in the same domain that your appliance does.
>>
>
>The user is not in our AD and this user is in company B.

Then you can't do recipient validation. This is what I meant when I
said that if you didn't have all the addresses in both directories
that you'd have to accept all mail sent to your ab.com domain.
Addresses that can't be resolved by the Exchange servers in Company A
would have to be sent to Company B (i.e. the smart host) and if they
couldn't be resolved there they'd have to be NDRed.

>If user is not in
>our AD, it should use SMTP connector for ab.com (SMTP sharing space) to route
>users at company B(SMTP connector for ab.com -unathoriative are configured at
>both company and check the box "allow relay to...")

But you'd have to accept the message 1st. And as long as you're
validating that the recipient exists in YOUR directory you'll reject
all the addresses in ab.com that *don't* exist there.

>When I trace the message, the appliance finished all checks and start to
>deliver the message to our exchange server and failed with that error. Why
>did exchange use the SMTP connector to route message to userB at company B?

Why *did* it? Or why did it *not*? It sounds like you're doing
recipient filtering on the Exchange server and not the appliance.
---
Rich Matheisen
MCSE+I, Exchange MVP
From: ed on
Human error:-) I thought that I made ab.com unarthoriative and it's
authortiative when I checked it today.

All are wroking fine now.

Thank you and have a nice weekend. Watch world cup games? and enjoy!

"Rich Matheisen [MVP]" wrote:

> On Thu, 17 Jun 2010 10:19:51 -0700, ed <ed(a)discussions.microsoft.com>
> wrote:
>
> >Rich,
> >
> >Thank you.
> >
> >> >> If the appliance is rejecting the address as invalid then it never
> >> >> reaches the Exchange servers.
> >> >
> >> >the appliance checks the domain controllers and now, I bypassed LDAP check
> >> >on the appliance. But, when I send emails from yahoo.com to users at company
> >> >B with @ab.com, I got the userb(a)ab.com bounced by destination server. Reason:
> >> >5.1.0 - Unknown address error ('550', ['5.1.1 User unknown'])
> >> >
> >> >What might I miss?
> >>
> >> If you get the same error then I'd say that the address isn't in the
> >> directory you're using.
> >>
> >> Try using LDP.exe and the ldap query
> >> "proxyaddresses=smtp:userb(a)ab.com" and see if you find the user. Make
> >> sure you query a GC in the same domain that your appliance does.
> >>
> >
> >The user is not in our AD and this user is in company B.
>
> Then you can't do recipient validation. This is what I meant when I
> said that if you didn't have all the addresses in both directories
> that you'd have to accept all mail sent to your ab.com domain.
> Addresses that can't be resolved by the Exchange servers in Company A
> would have to be sent to Company B (i.e. the smart host) and if they
> couldn't be resolved there they'd have to be NDRed.
>
> >If user is not in
> >our AD, it should use SMTP connector for ab.com (SMTP sharing space) to route
> >users at company B(SMTP connector for ab.com -unathoriative are configured at
> >both company and check the box "allow relay to...")
>
> But you'd have to accept the message 1st. And as long as you're
> validating that the recipient exists in YOUR directory you'll reject
> all the addresses in ab.com that *don't* exist there.
>
> >When I trace the message, the appliance finished all checks and start to
> >deliver the message to our exchange server and failed with that error. Why
> >did exchange use the SMTP connector to route message to userB at company B?
>
> Why *did* it? Or why did it *not*? It sounds like you're doing
> recipient filtering on the Exchange server and not the appliance.
> ---
> Rich Matheisen
> MCSE+I, Exchange MVP
> .
>