Dear community members,
last weekend we implemented a new FG60d firewall to our primary site.
since this moment we are unable to send e-mail to microsoft office 365 customers who use *.protection.outlook.com as their first mx destination.
i find the support i get from the official support team below average so i hope someone knows the solution to my problem.
- the PTR record is setup correctly
- the SPF is setup correctly
- online i find some references to this issue, all talking about application filtering and ssl inspection.
therefor i disabled all UTM functions.
still no result.
the error in our exchange server send connector queue is:
LastError : [{LRT=22-9-2016 10:33:51};{LED=451 4.4.0 SMTPSEND.SuspiciousRemoteServerError; remote server disconnected abruptly; retry will be delayed};{FQDN=fastfood-dk01b.mail.eo.outlook.com};{IP=213.199.154.170}]
the smtp log:
2016-09-22T08:28:32.448Z,ForceHelo,08D3E258D12635EE,0,,213.199.154.234:25,*,,attempting to connect 2016-09-22T08:28:32.464Z,ForceHelo,08D3E258D12635EE,1,192.168.226.23:26860,213.199.154.234:25,+,, 2016-09-22T08:28:32.511Z,ForceHelo,08D3E258D12635EE,2,192.168.226.23:26860,213.199.154.234:25,<,"220 VE1EUR01FT021.mail.protection.outlook.com Microsoft ESMTP MAIL Service ready at Thu, 22 Sep 2016 08:28:31 +0000", 2016-09-22T08:28:32.511Z,ForceHelo,08D3E258D12635EE,3,192.168.226.23:26860,213.199.154.234:25,>,HELO remote.kingcuisine.nl, 2016-09-22T08:28:32.542Z,ForceHelo,08D3E258D12635EE,4,192.168.226.23:26860,213.199.154.234:25,<,250 VE1EUR01FT021.mail.protection.outlook.com Hello [178.238.111.82], 2016-09-22T08:28:32.542Z,ForceHelo,08D3E258D12635EE,5,192.168.226.23:26860,213.199.154.234:25,*,,sending message with RecordId 34634616274972 and InternetMessageId <cda6b662dca54a5c82efe671104a2e3e@KC-EXCHANGE2013.kc.lok> 2016-09-22T08:28:32.542Z,ForceHelo,08D3E258D12635EE,6,192.168.226.23:26860,213.199.154.234:25,>,MAIL FROM:<##PRIVATE DATA##>, 2016-09-22T08:28:32.558Z,ForceHelo,08D3E258D12635EE,7,192.168.226.23:26860,213.199.154.234:25,<,250 2.1.0 Sender OK, 2016-09-22T08:28:32.558Z,ForceHelo,08D3E258D12635EE,8,192.168.226.23:26860,213.199.154.234:25,>,RCPT TO:<##PRIVATE DATA##>, 2016-09-22T08:28:32.839Z,ForceHelo,08D3E258D12635EE,9,192.168.226.23:26860,213.199.154.234:25,<,250 2.1.5 Recipient OK, 2016-09-22T08:28:32.839Z,ForceHelo,08D3E258D12635EE,10,192.168.226.23:26860,213.199.154.234:25,>,DATA, 2016-09-22T08:28:32.870Z,ForceHelo,08D3E258D12635EE,11,192.168.226.23:26860,213.199.154.234:25,<,354 Start mail input; end with <CRLF>.<CRLF>, 2016-09-22T08:28:51.870Z,ForceHelo,08D3E258D12635EE,12,192.168.226.23:26860,213.199.154.234:25,-,,Remote
User | Count |
---|---|
2624 | |
1392 | |
804 | |
667 | |
455 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.