- Case 1: The on-premises Exchange Send connector that is designated to send mail to the Internet is not correctly set up to deliver mail to EOP.
- Case 2: The EOP inbound connector has not been created, or it is either set up incorrectly or disabled.
Case 1Make sure that the delivery address is set up correctly for the on-premises Send connector. To do this, verify the following conditions under Select how to send mail with this connector on the Network tab in the Internet Connector Properties dialog box:
- That the Route mail through the following smart hosts option is selected.
- That the smart host address is specified to the EOP MX address of the domain. The EOP MX address can be found under the DNS settings of the domain. For example, the correct smart host address for contoso.com is contoso-com.mail.protection.com.
Case 2Verify that an inbound connector that is associated with your on-premises domain has been created, or that it is set up and enabled correctly.
To create an inbound connector, follow these steps:
- Sign in to the Exchange admin center as an administrator.
- In the Exchange admin center, click mail flow. If you do not see mail flow, click Exchange Online Protection on the Admin menu in Microsoft Office 365.
- Click connectors, and then click the Plus Sign (+) to create a new inbound connector.
- After the new inbound connector window appears, follow these steps:
- Complete the required fields.
- Set Connector Type to On-premises.
- Set Connection Security to Force TLS.
- Specify the certificate subject name of the certificate that is used from the on-premises deployment.
- Under scope, click the Plus Sign (+).
- After the add domain dialog box appears, add your on-premises domain, and then click OK.
- Under IP addresses, click the Plus Sign (+) to add the IP addresses of your mail servers, and then click OK.
- Save the inbound connector. The inbound connector appears in the list of connectors, and when you select it, its properties are displayed.