Error 554 No relaying allowed - psmtp

Issue: Outgoing messages from your mail server are rejected by the message security service with the error: "554 No relaying allowed - psmtp"

Symptoms: You are routing outgoing mail through the message security service. Since the security service does not handle mail for the sending domain, the traffic is bouncing.

Resolution: You can troubleshoot this issue as follows:
  1. Check the DNS MX entries for the mail server in question (e.g. for mail server mail.domain.com). From a UNIX prompt type: "dig mail.domain.com mx"

    You may see results like this:

    mail.domain.com. 1H IN CNAME domain.com. domain.com. 1H IN MX 100 domain.com.sNa1.psmtp.com. domain.com. 1H IN MX 200 domain.com.sNa2.psmtp.com. domain.com. 1H IN MX 300 domain.com.sNb1.psmtp.com. domain.com. 1H IN MX 400 domain.com.sNb2.psmtp.com. domain.com. 1H IN MX 500 mail.domain.com.

    In this case there is an CNAME entry for mail.domain.com pointing back to the domain which has DNS MX records routing to the security service.

  2. Remove the CNAME and create an A record for the mail host.
Note: This article is intended for administrators using Message Security and Message Discovery. If you're using another edition, your service may include different features from those described in this article.