Share via

Need help to decipher NDR

Roger Beattie 0 Reputation points
2024-11-20T19:57:47.23+00:00

Diagnostic information for administrators:

Generating server: DM4PR07MB9911.namprd07.prod.outlook.com

Receiving server: DM4PR07MB9911.namprd07.prod.outlook.com

rbeattie@pbconventioncenter.com

11/20/2024 5:36:15 PM - Server at DM4PR07MB9911.namprd07.prod.outlook.com returned '550 5.4.316 Message expired, connection refused(Socket error code 10061)'

11/20/2024 5:25:55 PM - Server at pbconventioncenter.com (151.132.200.134) returned '450 4.4.316 Connection refused [Message=Socket error code 10061] [LastAttemptedServerName=pbconventioncenter.com] [LastAttemptedIP=151.132.200.134:25] [SmtpSecurity=-2;-2] CY6PEPF00000037.namprd02.prod.outlook.com 2024-11-20T17:26:15.627Z 08DD08FBBBE4FF48'

Original message headers:

Received: from BN0PR07MB8765.namprd07.prod.outlook.com (2603:10b6:408:16a::23)

by DM4PR07MB9911.namprd07.prod.outlook.com (2603:10b6:8:18d::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8158.21; Wed, 20 Nov

2024 15:46:32 +0000

Received: from SJ0PR07MB7742.namprd07.prod.outlook.com (2603:10b6:a03:278::21)

by BN0PR07MB8765.namprd07.prod.outlook.com (2603:10b6:408:16a::23) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8182.15; Wed, 20 Nov

2024 04:40:21 +0000

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=sHTSrQYBmCrIEu0d9kf3Qa6gsqy0yR2zG2SwchczNvjN6eVG2scTLsSw7vk5nwTAMSDUCFcoFAx0idIdyGuhDx+eqzS9qo1Z9b7VvIowAHC1vKNGO8wY3vZP7q+GqfWD2qcV1cTctPHGwXoYzH7yX3fj2c9rSy4H8C9Te6NO/Gro6Ml/kRdU0I8aDqVEHrkohy0m5PD5DbI6ZPxpGhV9Q/gO5k0YcdKVxWqAKm9BLDUkFZrXGo+xcQNqxAvnL7Tq3UGMIBmp4OaK46zuN1V+8f+W5WBFFaUHUiuQzpimiszSACTmLozAD7uPUwZ2H5HMW9psc/7SzypNSityfCyPew==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=9xvrvH7qmtY/v15J1iALZNpyOgZZTbVgfwxKIQeRzv8=;

b=xnYc23lGrDZQZWV7dwm+bOBYTm68ymDrQ3wwDh7qgq3nPKpu0QTHBfLUcznmmdpWwHdGTAfUnh0vUDAtynSg/YR30tlcPoZQPrraZwEe/VtM/VgmcvhLqtDF5Rw0Ur/64Cvx1Fxw4PT+l82M2RdZ05sLjdiZDPyP2gKC70+64A1x473Ft+en5klJDwSxQqJy7oRm7+P9zuHO0r0lgc2+VDzFKytY/Fj/T2wf7IgR2wrf4c3X3IJ8VFFZ9QiiMDt94yfhEGfbLUR8SPCobiM3Yjq3+Pvv1KOK+Y1YG8qb653R4rajY8sjpI+vCqKFwQ7m/r1DuQJojVWig+s4Wv0eiQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=pbconventioncenter.com; dmarc=pass action=none

header.from=pbconventioncenter.com; dkim=pass

header.d=pbconventioncenter.com; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=pbconventioncenter.onmicrosoft.com;

s=selector1-pbconventioncenter-onmicrosoft-com;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=9xvrvH7qmtY/v15J1iALZNpyOgZZTbVgfwxKIQeRzv8=;

b=Pc8pcv+ZoTMUS03MV5UEG2BMsElV6oT4wxwjJlABpTL3NPAtxaB3huh6I3Pw/3XRXUT+xF9vcUdtZGGZ9DMPubUqZtA9kisizCnQ1xwNyFBFQWH5Dpv0zfpj6X8DHPDmEtOzW/pxo53sK/EYaaWfkUCKNk8koKamr58kghIDte8=

Received: from BL0PR07MB4130.namprd07.prod.outlook.com (2603:10b6:207:45::16)

by SJ0PR07MB7742.namprd07.prod.outlook.com (2603:10b6:a03:278::21) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8158.24; Tue, 19 Nov

2024 17:32:13 +0000

Received: from BL0PR07MB4130.namprd07.prod.outlook.com

([fe80::c3:56ec:f227:687c]) by BL0PR07MB4130.namprd07.prod.outlook.com

([fe80::c3:56ec:f227:687c%6]) with mapi id 15.20.8158.017; Tue, 19 Nov 2024

17:32:12 +0000

Content-Type: multipart/mixed;

boundary="_000_BL0PR07MB4130244A202823E4C11711BAA4202BL0PR07MB4130namp_"

From: ittest ittest@pbconventioncenter.com

To: Roger Beattie rbeattie@pbconventioncenter.com

Subject: tessssssssssssssssss

Thread-Topic: tessssssssssssssssss

Thread-Index: AQHbOqj4XP1Ht0/BA0edwUxEt6MvNg==

Date: Tue, 19 Nov 2024 17:32:12 +0000

Message-ID: BL0PR07MB4130244A202823E4C11711BAA4202@BL0PR07MB4130.namprd07.prod.outlook.com

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator: BL0PR07MB4130244A202823E4C11711BAA4202@BL0PR07MB4130.namprd07.prod.outlook.com

msip_labels:

authentication-results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=pbconventioncenter.com;

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic:

BL0PR07MB4130:EE_|SJ0PR07MB7742:EE_|BN0PR07MB8765:EE_|DM4PR07MB9911:EE_

x-ms-office365-filtering-correlation-id: 4dd87874-458d-40e4-5d3a-08dd08c01a91

X-LD-Processed: 82ca2155-3825-45c9-a73e-f60799da1d07,ExtAddr,ExtAddr,ExtAddr

x-microsoft-antispam: BCL:0;ARA:13230040|366016|8096899003|41050700001;

x-microsoft-antispam-message-info: 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

x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BL0PR07MB4130.namprd07.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(8096899003)(41050700001);DIR:INT;

MIME-Version: 1.0

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: BL0PR07MB4130.namprd07.prod.outlook.com

X-MS-Exchange-CrossTenant-Network-Message-Id: 4dd87874-458d-40e4-5d3a-08dd08c01a91

X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Nov 2024 17:32:12.8422

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 82ca2155-3825-45c9-a73e-f60799da1d07

X-MS-Exchange-CrossTenant-mailboxtype: HOSTED

X-MS-Exchange-CrossTenant-userprincipalname: CRKGhrdhVLtsAG5CJePzRKK7dlz050q5zNAmprmrH2hT5TRO6Oz/ccaDJMSjZI7/dgYPvb6tQMy2t46WtYscL3f1GFuckLD0Qb1ji848yPQ=

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR07MB7742

X-OrganizationHeadersPreserved: SJ0PR07MB7742.namprd07.prod.outlook.com

Return-Path: ittest@pbconventioncenter.com

X-OriginatorOrg: pbconventioncenter.com

X-CrossPremisesHeadersFilteredByDsnGenerator:

DM4PR07MB9911.namprd07.prod.outlook.com

Office
Office
A suite of Microsoft productivity software that supports common business tasks, including word processing, email, presentations, and data management and analysis.
1,754 questions
Microsoft Exchange
Microsoft Exchange
Microsoft messaging and collaboration software.
588 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Mengying Li (Shanghai Wicresoft Co Ltd) 315 Reputation points Microsoft Vendor
    2024-11-21T07:36:18.26+00:00

    Hi, @Roger Beattie

    Thank you for posting your question in the Microsoft Q&A forum.

    According to your description, you want to know what the NDR information describes. According to the information you provided, you can see that both your sending and receiving ends are DM4PR07MB9911.namprd07.prod.outlook.com. 2024-11-20 5:36:15 PM, when sending mail to rbeattie@pbconventioncenter.com, a 550 5.4.316 Message expired, connection denied (Socket error code 10061) error was encountered. 2024-11-20 5:25:55 PM, the pbconventioncenter.com server with IP address 151.132.200.134 returned a 450 4.4.316 Connection denied [Message=Socket error code 10061] error. These two errors indicate that a connection error was encountered when trying to connect to the target mail server. The possible reason is that your firewall blocks connections from the Microsoft 365 IP address. Or, if you have migrated your on-premises email system to Microsoft 365 and shut down your on-premises email environment. You can try the following steps to resolve:

    1. If you have mailboxes in your on-premises environment, modify your firewall settings to allow connections to your on-premises email server from the Microsoft 365 IP address on TCP port 25.
    2. If mail is no longer being delivered to your on-premises environment, try to resolve the issue by disabling or removing the connector that delivers email from Microsoft 365 to your on-premises email environment:
    • In the EAC, go to Mail flow > Connectors.
      • On the Connectors page, select the circular check box next to the Status column, select the connector from the list, and then select the Delete action.
      • In Microsoft 365, change the accepted domain associated with your on-premises email environment from Internal relay to Authoritative.

    Refer to: https://learn.microsoft.com/en-us/defender-office-365/connectors-mail-flow-intelligence?view=o365-worldwide#error-code-450-44316-connection-refused

    Microsoft 365 URLs and IP address ranges - Microsoft 365 Enterprise | Microsoft Learn

    If you have any questions, please feel free to contact me. If the answer is helpful, please click "Accept Answer" because it can help other members of the Microsoft Q&A community who have encountered similar problems and are looking for solutions. Thank you.

    Best,

    Jeanne

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.