Description |
This article describes how to avoid the 'Recipient Verification – Reject' error that occurs with an incorrect smtp-rcpt-verification configuration. |
Scope |
FortiMail v7.0+. |
Solution |
When the smtp-rcpt-verification is enabled on protected domains, FortiMail will use the address configured in the mail-from-addr field in the mail-from: attribute to the recipient MTA server.
Depending on the specific MTA receiving server, SMTP codes 5xx and 4xx can be received on FortiMail in these cases (by looking at 'Mail Event' Logs):
reject=550 5.1.8 <username@invalid-or-expired-domain.com>: Sender address rejected: Domain not found
Note: In the aforementioned example, configuring mailsetting smtp-rcpt-verification looks like this:
config mailsetting smtp-rcpt-verification
As the domain example, @invalid-or-expired-domain.com is invalid (or expired), the sender validation check failed when the recipient MTA server performed a sender validation check. As a result, it returned the 'Rejected' error with code 5xx or 4xx.
To avoid this specific issue, use a 'dummy' email address from a valid domain (i.e. your-fml-instance-id@fortimail.com) as follows:
config mailsetting smtp-rcpt-verification
In the above example, your-fml-instance-id = gw123456 is appropriate.
Note: gw123456@fortimail.com is a dummy mail address, but the domain @fortimail.com is a valid domain that will not cause 'Recipient Verification – Reject' on the recipient MTA server when smtp-rcpt-verification is enabled. |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.