550 IP Authorization check failed - psmtp on Salesforce.com emails

Issue: Messages from Salesforce.com to your domain bounce.

Symptoms: The bounce message for the undelivered emails is "550 IP Authorization check failed - psmtp."

Resolution: An IP Lock configuration has been set up to tie the domain in the sender address of an email with the IP range of the mail servers authorized to send emails from that domain, and the list of allowed IP address ranges does not include the Salesforce.com mail servers sending these messages.

To resolve this issue, add the IP addresses of the Salesforce.com servers to the IP Lock list. According to Salesforce.com support, the IP address spaces are as follows:

204.14.232.0/25
204.14.233.0/25
204.14.234.0/25
204.14.235.0/25

The batch commands to add these ranges to your IP Lock configuration are:

addallowedip ,:204.14.232.0/25
addallowedip ,:204.14.233.0/25
addallowedip ,:204.14.234.0/25
addallowedip ,:204.14.235.0/25

Adding an IP range does not bypass spam and virus filtering.

For additional information on IP Lock and preventing spam with spoofed sender addresses, see the Administration Guide:

http://www.postini.com/admindoc/secur_iplock.html

Editions: This article is intended for administrators using Message Filtering, Message Security, Message Discovery, Enterprise Edition and Service Provider Edition. If you're using another edition, your service may include different features from those described in this article.

Keywords: IP Lock, incorrect ip, Salesforce, Salesforce.com, 571