Fix NDR error code "451 4.7.500-699 (ASxxx)" in Exchange Online
It's frustrating when you get an error after sending an email message. This topic describes what you can do if you see error code 451 4.7.500-699 (ASxxx) in a non-delivery report (also known as an NDR, bounce message, delivery status notification, or DSN).
Why did I get this bounce message?
You received this NDR because the source email server (the connecting IP address) changed its previous email sending patterns by sending a much higher volume of messages than in the past.
This error code is part of anti-spam filtering in Microsoft 365 or Office 365. You get this error when the source IP address that's sending you email changes significantly from its previously-established patterns. This part of a filtering technique known as graylisting: when new senders appear, they're treated more suspiciously than senders with a previously-established history of sending email messages (think of it as a probation period).
This error response is called IP throttling, and it can help reduce the amount of spam that you receive.
I got this bounce message. How do I fix it? | I'm an email admin. How can I fix this error? |
I got this bounce message. How do I fix it?
If you received this NDR in response to a message that you sent, try the following steps:
If your organization uses Exchange Online Protection (EOP) as part of Microsoft 365 or Office 365 or standalone EOP subscription, an email admin can use the steps in the next section to fix the problem.
If your organization doesn't use EOP (for example, if you provide a third-party service), the error will resolve itself as you establish an email sending history with Microsoft 365 or Office 365 over a period of a few days.
If the problem continues, send the bounce message to your email admin for assistance and refer them to the information in this article.
I'm an email admin. How do I fix this error?
To remove throttling for these messages, you need to configure a connector:
If you're trying to relay outbound email from your on-premises email server through Microsoft 365 or Office 365, you need to configure a connector from your email server to Microsoft 365 or Office 365. For more information, see Set up connectors to route mail between Microsoft 365 or Office 365 and your own email servers.
If inbound email to your Microsoft 365 or Office 365 organization is first routed through a third-party service, appliance, or device, you need to set up a connector to apply security restrictions.
After you have set up a connector, you can monitor if IP throttling has stopped.
Note
We don't recommend sending more than test messages from your initial onmicrosoft.com domain. Email from onmicrosoft.com domains is limited and filtered to prevent spam. In typical production environments, you need to add a custom domain and then send your regular volume of email messages. For more information on domains, check out this Domains FAQ.