This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Recipient address rejected: Access denied error on Email Gateway

Hi,

I am currently in trial mode and doing some email sending with a test domain. It is a hosted on MS 365

I believe I have everything setup correctly but I am receiving this error when sending from an outside address

Any ideas on what may be wrong

Reporting-MTA: dns; googlemail.com
Arrival-Date: Thu, 11 Aug 2022 16:25:56 -0700 (PDT)
X-Original-Message-ID: <CANfQ=SLg+sdRvreawv14+mF1W4yvQMd5GNyBsO+F13hdsqw8uQ@mail.gmail.com>

Final-Recipient: rfc822; testuser@xxxx.com
Action: failed
Status: 5.7.1
Remote-MTA: dns; mx-01.eml100syd.ctr.sophos.com. (13.55.68.251, the server for
the domain arlpay.com.)
Diagnostic-Code: smtp; 554 5.7.1 <testuser@xxxx.com>: Recipient address rejected: Access denied
Last-Attempt-Date: Thu, 11 Aug 2022 16:25:58 -0700 (PDT)

Thanks,

Victor

Added tags
[edited by: Raphael Alganes at 9:23 AM (GMT -7) on 2 Jun 2023]

Top Replies

j0hnV over 2 years ago in reply to Victor G +1 suggested

When starting with Central, one of the first choices that needs to be made is the location of the Central data. This location can't be changed, Sophos even promises that this data won't leak to other regions…

0 Erick Jan over 2 years ago

Hi Victor,

Can you double-check if your domain is properly configured and if the IP isn’t blacklisted

Configure M365:https://soph.so/rdFNck

Domain Setting:https://soph.so/triFKQ

Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Victor G over 2 years ago in reply to Erick Jan

I have checked all settings and they seem to be correct.

I raised a case with Support ( 05598010 ) on the 12th but haven't heard anything yet.

My concern is that the license for our legacy SEA appliances is going to expire in a few days, so I need this working asap.

I seem to recall that there is a 2 week grace period for the license expiration.

Can anyone confirm this ?
Cancel
Vote Up 0 Vote Down

Cancel
0 Victor G over 2 years ago

So after raising a support call with Sophos I was informed that I needed to use the USA mx records instead of the AUS mx records detailed here

https://docs.sophos.com/central/Customer/help/en-us/ManageYourProducts/EmailSecurity/EmailDomainInfo/index.html#EmailMXRecords

Apparently my instance of Sophos Central / Email Gateway is hosted in the USA even though I am an AUS based.

After changing them I was able to get inbound mail flow working

I have been asked to contact my account manager to see what can be done to move the subscription.

For compliance reasons I need to have all cloud services based in AUS
Cancel
Vote Up 0 Vote Down

Cancel
0 j0hnV over 2 years ago in reply to Victor G

When starting with Central, one of the first choices that needs to be made is the location of the Central data. This location can't be changed, Sophos even promises that this data won't leak to other regions. I'm afraid that you'll have to start a new Central environment using the correct data location this time.

“First things first, but not necessarily in that order” – Doctor Who
Cancel
Vote Up +1 Vote Down

Cancel
0 ARL IT over 2 years ago in reply to j0hnV

I spoke to our account manager who confirmed that the early adopters of Sophos Central ( August 2021 ) has to specifically ask to have their instance is a certain region.

It is only later on the one got the option of selecting a region on first setup.

Apparently it is possible to migrate and we are working towards that now.

Will keep you posted on how it goes
Cancel
Vote Up +1 Vote Down

Cancel