Use the delist portal to remove yourself from the blocked senders list and address 5.7.511 Access denied errors
- Exchange Online Protection
- Microsoft Defender for Office 365 plan 1 and plan 2
- Microsoft 365 Defender
Are you getting an error message when you try to send an email to a recipient whose email address is in Microsoft 365 (for example and address 5.7.511 Access denied)? If you think you shouldn't be receiving the error message, you can use the delist portal to remove yourself from the blocked senders list.
What is the blocked senders list?
Microsoft uses the blocked senders list to protect its customers from spam, spoofing, and phishing attacks. Your mail server's IP address, that is, the address your mail server uses to identify itself on the Internet, was tagged as a potential threat to Microsoft 365 for one of a variety of reasons. When Microsoft 365 adds the IP address to the list, it prevents all further communication between the IP address and any of our customers through our datacenters.
You'll know you've been added to the list when you receive a response to a mail message that includes an error that looks something like this:
550 5.7.606-649 Access denied, banned sending IP [IP address] (ex. 5.7.511 Access denied): To request removal from this list please visit https://sender.office.com/ and follow the directions. For more information, see Email non-delivery reports in Exchange Online.
where IP address is the IP address of the computer on which the mail server runs.
Verify senders before removing them from the blocked senders list
There are good reasons for senders to wind up on the blocked senders list, but mistakes can happen. Take a look at this video for a balanced explanation of blocked senders and delisting.
To use delist portal to remove yourself from the blocked senders list (after errors like 5.7.511 Access denied)
In a web browser, go to https://sender.office.com.
Follow the instructions on the page. Ensure that you use the email address to which the error message was sent, and the IP address that is specified in the error message. You can only enter one email address and one IP address per visit.
The portal sends an email to the email address that you supply. The email looks something like the following:
Click the confirmation link in the email sent to you by the delisting portal.
This brings you back to the delist portal.
In the delist portal, click Delist IP.
After the IP address is removed from the blocked senders list, email messages from that IP address will be delivered to recipients who use Microsoft 365. So, make sure you're confident that email sent from that IP address won't be abusive or malicious; otherwise, the IP address might be blocked again.
It may take up to 24 hours or results can vary widely before restrictions are removed.
See Create safe sender lists in EOP and Outbound spam protection in EOP to prevent an IP from being blocked.
How to fix error code 5.7.511
When there's a problem delivering an email message that you sent, Microsoft 365 or Office 365 sends an email notification to let you know. The email notification is known a delivery status notification or DSN. The most common type of DSN is a non-delivery report (also known as an NDR or bounce message) that tells you that a message wasn't delivered. In certain situations, Microsoft must conduct additional investigations against traffic from your IP address. If you receive and NDR with code 5.7.511, you will not be able to use the delist portal.
550 5.7.511 Access denied, banned sender[xxx.xxx.xxx.xxx]. To request removal from this list, forward this message to firstname.lastname@example.org. For more information, go to https://go.microsoft.com/fwlink/?LinkId=526653.
In the email to request removal from this list, provide the full NDR code and IP address. Microsoft will contact you within 48 hours with the next steps.
The delisting form for Outlook.com, the consumer service can be found here. Be sure to read the FAQ first for submission direction.
Submit and view feedback for