MailFixIt

Outlook / Microsoft 365 delivery response

Understand Outlook / Microsoft 365 550 5.7.703: Tenant Allow or Block List rejection

Microsoft tenant policy rejected the sender or message Start with the complete response and the system that owns the failing step.

Problem description

A representative response is:

550 5.7.703 Tenant Allow or Block List rejection.
Is this temporary or permanent?

Treat this as permanent until the complete provider response and retry behavior show otherwise.

What to preserve

Keep the complete SMTP response, timestamp, recipient, sender identity, queue or message ID, and every Received hop. Provider wording can narrow the interpretation, but a numeric code alone is not a complete diagnosis.

Ownership and next action

  1. Identify whether the sender, DNS operator, receiving provider, or recipient controls the failing step.
  2. Compare the exact envelope sender, visible From domain, recipient, and final receiving host.
  3. Follow the current provider documentation linked above before changing configuration.
  4. Make one narrow, reversible correction owned by the responsible administrator.
  5. Send a controlled test and retain the new response as evidence.

MailFixIt scope

MailFixIt can inspect bounded public DNS configuration on relevant guide pages, but it does not promise to clear provider reputation decisions, mailbox state, credentials, message-content blocks, or historical transport failures. Use related links only for the configuration they explicitly cover.

Frequently asked questions

What does Outlook / Microsoft 365 550 5.7.703: Tenant Allow or Block List rejection mean?

It is a receiver response associated with microsoft tenant policy rejected the sender or message Use the complete wording and provider context before assigning a single cause.

Can MailFixIt prove this entire bounce from public DNS?

No. The current checker can evaluate selected public DNS configuration, but it cannot recreate recipient state, credentials, reputation, message content, or a historical provider SMTP decision.

Related email diagnostics

SMTP 5.7.1: Delivery not authorizedSMTP 5.7.1 means delivery is not authorized; use the full response to identify a recipient restriction, relay permission, transport rule, or filtering policy. Gmail 550 5.7.1: Delivery not authorizedGmail 550 5.7.1 is a broad permanent rejection; match the exact response text to a policy, relay, reputation, header, rate-limit, or IPv6 problem before acting.

Primary sources: Microsoft 365 non-delivery reports.