Request of advice on return of error message no. 550 5.7.0 Local Policy Violation

Use this forum if you have installed hMailServer and want to ask a question related to a production release of hMailServer. Before posting, please read the troubleshooting guide. A large part of all reported issues are already described in detail here.
Post Reply
orbstudio
New user
New user
Posts: 6
Joined: 2018-07-12 10:30

Request of advice on return of error message no. 550 5.7.0 Local Policy Violation

Post by orbstudio » 2019-12-26 09:20

My company has just acquired the fixed IP address of 1.10.143.218 from our ISP to be used as mailing server. But we have faced errors that emails sent from our server bounced back and returned with the message of "550 5.7.0 Local Policy Violation" from many recipients using gmail, yahoo and etc.

I have checked all blacklist and reputation already but I have found no issue. Please suggest me the other ways to try to solve this problem.

Thank you.

Code: Select all

"DEBUG"	4020	"2019-12-26 13:49:37.773"	"External delivery process completed"
"DEBUG"	4020	"2019-12-26 13:49:37.773"	"Summarizing delivery result"
"DEBUG"	4020	"2019-12-26 13:49:37.773"	"AWStats::LogDeliverySuccess"
"DEBUG"	4020	"2019-12-26 13:49:37.898"	"AWStats::LogDeliverySuccess"
"DEBUG"	4020	"2019-12-26 13:49:37.976"	"Summarized delivery results"
"DEBUG"	4020	"2019-12-26 13:49:38.101"	"Starting external delivery process. Server: cust48801-2.in.mailcontrol.com (116.50.58.190), Port: 25, Security: 2, User name: "
"DEBUG"	4020	"2019-12-26 13:49:38.101"	"Creating session 616"
"DEBUG"	5880	"2019-12-26 13:49:38.101"	"TCP connection started for session 616"
"SMTPC"	5880	616	"2019-12-26 13:49:38.367"	"116.50.58.190"	"RECEIVED: 220 mail-kkm-gw2.totbroadband.net ESMTP Thu, 26 Dec 2019 13:49:39 +0700"
"SMTPC"	5880	616	"2019-12-26 13:49:38.367"	"116.50.58.190"	"SENT: EHLO mail.dechaco.com"
"SMTPC"	4972	616	"2019-12-26 13:49:38.367"	"116.50.58.190"	"RECEIVED: 250-mail-kkm-gw2.totbroadband.net Hello mail.dechaco.com [1.10.143.218], pleased to meet you[nl]250-ENHANCEDSTATUSCODES[nl]250-PIPELINING[nl]250 8BITMIME"
"SMTPC"	4972	616	"2019-12-26 13:49:38.367"	"116.50.58.190"	"SENT: MAIL FROM:<xxx@dechaco.com>"
"SMTPC"	3708	616	"2019-12-26 13:49:38.382"	"116.50.58.190"	"RECEIVED: 250 2.1.0 Sender ok"
"SMTPC"	3708	616	"2019-12-26 13:49:38.382"	"116.50.58.190"	"SENT: RCPT TO:<xxxN@xxxxx.com>"
"SMTPC"	3796	616	"2019-12-26 13:49:38.382"	"116.50.58.190"	"RECEIVED: 250 2.1.5 Recipient ok"
"SMTPC"	3708	616	"2019-12-26 13:49:38.382"	"116.50.58.190"	"SENT: DATA"
"SMTPC"	3796	616	"2019-12-26 13:49:38.648"	"116.50.58.190"	"RECEIVED: 354 Enter mail, end with "." on a line by itself"
"SMTPC"	4972	616	"2019-12-26 13:49:38.992"	"116.50.58.190"	"SENT: [nl]."
"SMTPC"	4332	616	"2019-12-26 13:49:39.101"	"116.50.58.190"	"RECEIVED: 550 5.7.0 Local Policy Violation"
"SMTPC"	4332	616	"2019-12-26 13:49:39.101"	"116.50.58.190"	"SENT: QUIT"
"SMTPC"	3796	616	"2019-12-26 13:49:39.117"	"116.50.58.190"	"RECEIVED: 221 2.0.0 mail-kkm-gw2.totbroadband.net Closing connection"
"DEBUG"	3796	"2019-12-26 13:49:39.117"	"Ending session 616"
"DEBUG"	4020	"2019-12-26 13:49:39.117"	"External delivery process completed"
"DEBUG"	4020	"2019-12-26 13:49:39.117"	"Summarizing delivery result"

User avatar
katip
Senior user
Senior user
Posts: 766
Joined: 2006-12-22 07:58
Location: Istanbul

Re: Request of advice on return of error message no. 550 5.7.0 Local Policy Violation

Post by katip » 2019-12-26 09:40

first, ask your ISP to setup a pointer mail.dechaco.com -> 1.10.143.218
then you have to open an SPF record on your domain DNS
preferably setup a DKIM too while you're there.
you can test all here : http://www.mxtoolbox.com/index.aspx
Katip
--
HMS 5.7.0 x64, MariaDB 10.4.10 x64, SA 3.4.2, ClamAV 0.101.2 + SaneS

orbstudio
New user
New user
Posts: 6
Joined: 2018-07-12 10:30

Re: Request of advice on return of error message no. 550 5.7.0 Local Policy Violation

Post by orbstudio » 2019-12-26 10:05

katip wrote:
2019-12-26 09:40
first, ask your ISP to setup a pointer mail.dechaco.com -> 1.10.143.218
then you have to open an SPF record on your domain DNS
preferably setup a DKIM too while you're there.
you can test all here : http://www.mxtoolbox.com/index.aspx
Thank you for your kind advice.
I'll try to ask ISP and set SPF first.

orbstudio
New user
New user
Posts: 6
Joined: 2018-07-12 10:30

Re: Request of advice on return of error message no. 550 5.7.0 Local Policy Violation

Post by orbstudio » 2019-12-27 07:22

I try all your adviced but the server still have the problem. What can I try next ? Could someone please tell me.

User avatar
katip
Senior user
Senior user
Posts: 766
Joined: 2006-12-22 07:58
Location: Istanbul

Re: Request of advice on return of error message no. 550 5.7.0 Local Policy Violation

Post by katip » 2019-12-27 08:55

ns.dechaco.com ['150.107.31.53']
what is this?
it seems it belongs to your ISP
ns13.appservhosting.com ['150.107.31.53'] [TTL=172800]
BTW this IP is blacklisted in Backscatterer
do you use signature in your company mails linking back to your website www.dechaco.com -> dechaco.com -> [ 150.107.31.53 ]?
Katip
--
HMS 5.7.0 x64, MariaDB 10.4.10 x64, SA 3.4.2, ClamAV 0.101.2 + SaneS

lillaparken
New user
New user
Posts: 7
Joined: 2019-12-27 15:40

Re: Request of advice on return of error message no. 550 5.7.0 Local Policy Violation

Post by lillaparken » 2019-12-28 02:28

Microsoft, Google, Yahoo, AOL with more mail providers need to se a clean record of e-mail to provide them in the inbox. For example Microsoft let a new IP send to inbox the first weeks for Microsoft SmartScreen spam filter to learn about your E-mail.

Example Microsoft needs a 90 day period to validate a new IP.

You IP: 150.107.31.53
You get following warnings.
The impact that the quality of the actual hardware used to deploy mail, commonly referred to as your Mailing Transport Agent (MTA) is having on the sender score of this IP address.

The impact that the rate of mail sent to users that do not exist is having on the sender score of this IP address.

I need always to work with my lists, and keep them up to date. Also monitor my IP. I send tickets for 50-60 theaters in Sweden and also reminders and newsletter. About 100k mails a month. As an non profit organization we can't pay a company to do this so its up to me to make the mail delivery to the inbox.

To send E-mail to Microsoft, Google, Yahoo and other big providers
1. I recommend you to look at your mail list so its up to date, remove mail addresses that don't exist. More then 0,2 % mail sent to mailboxes that don't exist in a single send may block your IP temporary.

2. keep monitoring your server at https://www.senderscore.org/

3. Dmarc, SPF and DKIM.

4. Also check your settings in HmailServer.

5. To send large amounts of E-mail to Microsoft, Google, Yahoo with more you need to setup an account.
Microsoft: Register your IP in SNDS (Smart Network Data Services). Also register to Microsoft junk mailing reporting program
https://sendersupport.olc.protection.outlook.com/snds/

Microsoft is Office 365, hotmail, outlook, msn and more...

Google: Register a postmaster account. http://postmaster.google.com/

Yahoo: https://postmaster.yahoo.com/cfl-request
Yahoo also contains AOL today

6. All mail must be sent with TLS 1.2 or 1.3. Non encrypted E-mail is blocks by Google and Microsoft. From 1/1 2019 TLS 1.1 and 1.0 is downgraded to not be 100% secure.

7. mxtoolbox is a good site to check your server.


Remember a new reputation don't go over night. A new IP needs 90 days. To get a higher score of your IP takes some weeks of clean mailing list and handle SPAM within 48 hours. It means delete them from the list.

All mail list must contain
Return-Path: <bounce@yourdomain.com>
From: <mail@yourdomain.com>
Reply-To: mail@yourdomain.com
X-Mailer: Hmailserver 5.7
List-Unsubscribe: <https://www.yourdomain.com/unsubscribe>, unsubscribe@yourdomain.com

I recommend you to have a program to work with bounce mail. All bounce mail I get I have made a script to delete it from the list.

Also recommended in the mail header
X-Newsletter-Email-Id:
X-Auto-Response-Suppress: OOF, AutoReply

Newsletter ID lets you identify witch E-mail reported as spam. I also use ID for each E-mail so I can follow it all the way. Newsletter should always contain both a text version and a html version.
Attachments
print.png

orbstudio
New user
New user
Posts: 6
Joined: 2018-07-12 10:30

Re: Request of advice on return of error message no. 550 5.7.0 Local Policy Violation

Post by orbstudio » 2019-12-28 11:41

Dear katip and lillaparken,
Thank you for your kind advice.
I will try them again.

palinka
Senior user
Senior user
Posts: 2007
Joined: 2017-09-12 17:57

Re: Request of advice on return of error message no. 550 5.7.0 Local Policy Violation

Post by palinka » 2019-12-28 14:31

lillaparken wrote:
2019-12-28 02:28
Microsoft, Google, Yahoo, AOL with more mail providers need to se a clean record of e-mail to provide them in the inbox. For example Microsoft let a new IP send to inbox the first weeks for Microsoft SmartScreen spam filter to learn about your E-mail.

Example Microsoft needs a 90 day period to validate a new IP.

You IP: 150.107.31.53
You get following warnings.
The impact that the quality of the actual hardware used to deploy mail, commonly referred to as your Mailing Transport Agent (MTA) is having on the sender score of this IP address.

The impact that the rate of mail sent to users that do not exist is having on the sender score of this IP address.

I need always to work with my lists, and keep them up to date. Also monitor my IP. I send tickets for 50-60 theaters in Sweden and also reminders and newsletter. About 100k mails a month. As an non profit organization we can't pay a company to do this so its up to me to make the mail delivery to the inbox.

To send E-mail to Microsoft, Google, Yahoo and other big providers
1. I recommend you to look at your mail list so its up to date, remove mail addresses that don't exist. More then 0,2 % mail sent to mailboxes that don't exist in a single send may block your IP temporary.

2. keep monitoring your server at https://www.senderscore.org/

3. Dmarc, SPF and DKIM.

4. Also check your settings in HmailServer.

5. To send large amounts of E-mail to Microsoft, Google, Yahoo with more you need to setup an account.
Microsoft: Register your IP in SNDS (Smart Network Data Services). Also register to Microsoft junk mailing reporting program
https://sendersupport.olc.protection.outlook.com/snds/

Microsoft is Office 365, hotmail, outlook, msn and more...

Google: Register a postmaster account. http://postmaster.google.com/

Yahoo: https://postmaster.yahoo.com/cfl-request
Yahoo also contains AOL today

6. All mail must be sent with TLS 1.2 or 1.3. Non encrypted E-mail is blocks by Google and Microsoft. From 1/1 2019 TLS 1.1 and 1.0 is downgraded to not be 100% secure.

7. mxtoolbox is a good site to check your server.


Remember a new reputation don't go over night. A new IP needs 90 days. To get a higher score of your IP takes some weeks of clean mailing list and handle SPAM within 48 hours. It means delete them from the list.

All mail list must contain
Return-Path: <bounce@yourdomain.com>
From: <mail@yourdomain.com>
Reply-To: mail@yourdomain.com
X-Mailer: Hmailserver 5.7
List-Unsubscribe: <https://www.yourdomain.com/unsubscribe>, unsubscribe@yourdomain.com

I recommend you to have a program to work with bounce mail. All bounce mail I get I have made a script to delete it from the list.

Also recommended in the mail header
X-Newsletter-Email-Id:
X-Auto-Response-Suppress: OOF, AutoReply

Newsletter ID lets you identify witch E-mail reported as spam. I also use ID for each E-mail so I can follow it all the way. Newsletter should always contain both a text version and a html version.
This is an excellent post and should be stickied somewhere.

Perhaps you can repost in the user tutorial section where it can be found more easily.

User avatar
katip
Senior user
Senior user
Posts: 766
Joined: 2006-12-22 07:58
Location: Istanbul

Re: Request of advice on return of error message no. 550 5.7.0 Local Policy Violation

Post by katip » 2019-12-28 16:18

palinka wrote:
2019-12-28 14:31
This is an excellent post and should be stickied somewhere.

Perhaps you can repost in the user tutorial section where it can be found more easily.
recalls to me rather something else... spammer's basic checklist??
(i doubt OP's problem is about massmailing)
Katip
--
HMS 5.7.0 x64, MariaDB 10.4.10 x64, SA 3.4.2, ClamAV 0.101.2 + SaneS

palinka
Senior user
Senior user
Posts: 2007
Joined: 2017-09-12 17:57

Re: Request of advice on return of error message no. 550 5.7.0 Local Policy Violation

Post by palinka » 2019-12-28 18:41

katip wrote:
2019-12-28 16:18
palinka wrote:
2019-12-28 14:31
This is an excellent post and should be stickied somewhere.

Perhaps you can repost in the user tutorial section where it can be found more easily.
recalls to me rather something else... spammer's basic checklist??
(i doubt OP's problem is about massmailing)
I agree but it's excellent general knowledge worthy of a topic onto itself.

lillaparken
New user
New user
Posts: 7
Joined: 2019-12-27 15:40

Re: Request of advice on return of error message no. 550 5.7.0 Local Policy Violation

Post by lillaparken » 2019-12-28 23:09

I have now post it in User-submitted tutorials with some edit to be more of a tutorial: https://www.hmailserver.com/forum/viewt ... 21&t=34663

lillaparken
New user
New user
Posts: 7
Joined: 2019-12-27 15:40

Re: Request of advice on return of error message no. 550 5.7.0 Local Policy Violation

Post by lillaparken » 2019-12-28 23:14

katip wrote:
2019-12-28 16:18
recalls to me rather something else... spammer's basic checklist??
(i doubt OP's problem is about massmailing)
If you send very low volume of E-mail can not "Microsoft SmartScreen spam filter" determine if it is legal E-mail or not. You need a reputation first. In very low volumes it can take more than 90 days. According to Microsoft and Google they recommend a volume of 100 E-mail sent in one day every 30 days for there spam filer to learn more about the mails and keep it up to date.

Post Reply