Spam filter · 5.x.x permanent failure
Every SMTP 550 response on record from Exchange Online Protection, with the verbatim text, the enhanced status code, a severity rating and a plain-English fix.
The mailbox is unavailable and the message is rejected for good. This is the catch-all permanent failure, covering everything from an unknown address to an authentication failure to a reputation block, so the wording after the number is what actually tells you the reason.
smtp;550 5.4.1 [[email protected]]: Recipient address rejected: Access denied [example.com]
The address does not exist, or is no longer active, at this provider. Remove it from your list and check for a typo in the local part or the domain.
smtp;550 5.7.1 Service unavailable, Client host [x.xx.xx.xx] blocked using Spamhaus. To request removal from this list see https://www.spamhaus.org/query/ip/0.0.0.0 (AS16012611)
The sending IP or domain is on a blocklist the receiver checks, so mail stays refused until the listing clears. Find which list flagged you, fix the underlying cause, then request removal. Delivery can stay blocked for up to a day after delisting while caches refresh.
Provider documentation
550 5.7.1 Service unavailable, Helo domain is listed in Spamhaus. To request removal from this list see https://www.spamhaus.org/query/lookup/ (S8001) [#.prod.protection.outlook.com]
The sending IP or domain is on a blocklist the receiver checks, so mail stays refused until the listing clears. Find which list flagged you, fix the underlying cause, then request removal. Delivery can stay blocked for up to a day after delisting while caches refresh.
Provider documentation
smtp;550 5.7.606 Access denied, banned sending IP [x.xx.xx.xx]. To request removal from this list please visit https://sender.office.com/ and follow the directions. For more information please go to http://go.microsoft.com/fwlink/?LinkID=526655 (AS16012609)
The sending IP or domain is on a blocklist the receiver checks, so mail stays refused until the listing clears. Find which list flagged you, fix the underlying cause, then request removal. Delivery can stay blocked for up to a day after delisting while caches refresh.
Provider documentation
The mailbox is unavailable and the message is rejected for good. This is the catch-all permanent failure, covering everything from an unknown address to an authentication failure to a reputation block, so the wording after the number is what actually tells you the reason. At Exchange Online Protection, it is a permanent rejection, and the specific reason is in the enhanced status code and message text of each response below.
Match your bounce text to one of the responses below and follow its guidance. Recipient-side wording means fix the address. Authentication or reputation wording (SPF, DKIM, DMARC, blocklist) means fix your sending setup, and check Exchange Online Protection's postmaster documentation.
