Systems Tinkerer emblem

Traffic Not Accepted From This IP A Microsoft 365 mail-flow note from a real tenant setup.

After setting up a new Microsoft tenant, I encountered a mail-flow problem that looked more complicated than it actually was.

Outlook itself could send and receive e-mails without problems. The issue appeared only when our self-hosted mail server tried to send through the setup using its own IP address.

The error

The error message was clear enough to be annoying, but not clear enough to solve immediately without the right context.

Observed message

550 5.7.708 Service unavailable. Access denied, traffic not accepted from this IP.

Outlook still worked

Normal sending and receiving through Outlook was not affected, which made the problem easy to misinterpret at first.

Connector affected

The problem appeared in the mail-flow path involving our self-hosted server and its own IP address.

Time lost

I tried several approaches for two days before the correct explanation became clear.

The cause

Microsoft Support explained that the new tenant had not yet built up sufficient reputation. As a result, the unknown sending IP was initially rejected.

The IP itself was clean. The problem was not a classic blacklist case in my setup, but a reputation and trust issue around a newly created tenant and an IP that Microsoft did not yet accept for this mail flow.

The support message that helped

The useful part was describing the exact error instead of talking around the issue. Microsoft Support could then identify the known problem quickly.

What I learned

The technical lesson was simple: with Microsoft 365 mail-flow issues, the exact error code matters more than a long explanation.

Be precise

Include the exact error number and the affected sending IP address.

Mention the tenant

If the tenant is newly created, say that clearly. It may be relevant to reputation handling.

Check the IP

A blacklisted IP can cause similar symptoms. In my case, the IP was clean.

Do not over-explain

A short, exact support request can be more useful than a long story with too many side details.

Practical conclusion
If you see 550 5.7.708 with a new Microsoft 365 tenant, do not only check your own server. The tenant and sending IP may need Microsoft-side handling.

Solved through Microsoft Support within 24 hours once the problem was described correctly.

Sometimes the shortest error message contains the whole map. The trick is reading it correctly.