Re: using wrong smtp server

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: microsoft (tconley_at_hooveribcs.com)
Date: 11/12/04 

Date: Fri, 12 Nov 2004 10:48:36 -0500

thanks I will check that out. Is there a way to get in touch with you incase
this does not work, or just use the newsgroup?
"Ben Winzenz [Exchange MVP]" <ben_winzenz@NOSPAMdotmessageonedotcom> wrote
in message news:eLAz14MyEHA.1400@TK2MSFTNGP11.phx.gbl...
> Actually, it sounds like a firewall issue. It sounds like from the DMZ,
> port 25 outbound is not allowed, which would explain the connection
attempts
> not working, yet nslookup is returning results. If you fix the firewall
> problem so the outbound port 25 is allowed from the server in the DMZ and
> verify that you can initiate a connection, then you should be able to set
> the DMZ server as the only bridgehead and have outbound mail flow through
> it.
>
> --
> Ben Winzenz
> Exchange MVP
>
>
> "microsoft" <tconley@hooveribcs.com> wrote in message
> news:u0u9wvMyEHA.2192@TK2MSFTNGP14.phx.gbl...
> > first thing., thanks for being such a help thus far, now here are my
> > results:
> >
> > nslookup returns my internal network dns servers.
> > after changing the type and doing a lookup of yahoo, I get the responses
I
> > would expect, but when I try to telnet to any of them I get a connect
> > failed. I know the addresses work though, because from my workstation
> > inside
> > the network I can telnet to them fine. Looks like I dns config issue
> > right?
> > "Ben Winzenz [Exchange MVP]" <ben_winzenz@NOSPAMdotmessageonedotcom>
wrote
> > in message news:%23lTAWkMyEHA.1400@TK2MSFTNGP11.phx.gbl...
> >> If your server in the DMZ is not sending out, then it may not be
> > configured
> >> correctly to use DNS servers. How is that server set up? Is it set up
> >> to
> >> use your internal DNS servers for name resolution? What happens when
you
> >> perform an nslookup from that server?
> >>
> >> For example, from a command prompt, type nslookup, then type set
type=mx.
> >> run a query on a domain, such as yahoo.com. Do you get results back?
If
> >> you do, can you telnet to one of those servers successfully? From a
> > command
> >> prompt, type telnet servername 25 (indicating you want to connect on
port
> > 25
> >> to the remote server. If it is successful, you should see a banner
> >> indicating the other server is ready to start.
> >>
> >> --
> >> Ben Winzenz
> >> Exchange MVP
> >>
> >>
> >> "microsoft" <tconley@hooveribcs.com> wrote in message
> >> news:OqiGVVMyEHA.1984@TK2MSFTNGP14.phx.gbl...
> >> >I tried this a while back, and my mail went to the server in the dmz,
> >> >but
> >> >it
> >> > sat there and would not send out. It seemed to be just sitting in the
> >> > queue.
> >> > Any idea why?
> >> > "Ben Winzenz [Exchange MVP]" <ben_winzenz@NOSPAMdotmessageonedotcom>
> > wrote
> >> > in message news:OeIcM5DyEHA.2804@TK2MSFTNGP15.phx.gbl...
> >> >> Possibly, but what is more important is if the SMTP connector is
also
> > set
> >> > up
> >> >> to forward to a smarthost, or if it is set up to use DNS, and what
the
> >> >> Address space is configured as. I'd probably go ahead and list only
> > the
> >> >> server in the DMZ as the bridgehead. If you do that, you may notice
> > that
> >> >> you don't even need to configure the smarthost setting, as the
> > bridgehead
> >> >> will normally be the one that handles the message flow. Give it a
try
> >> >> and
> >> >> see if that works, otherwise make sure that the smarthost setting is
> > set
> >> > on
> >> >> the connector (IP enclosed in brackets).
> >> >>
> >> >> --
> >> >> Ben Winzenz
> >> >> Exchange MVP
> >> >>
> >> >>
> >> >> "microsoft" <tconley@hooveribcs.com> wrote in message
> >> >> news:%23F$YTVDyEHA.2804@TK2MSFTNGP15.phx.gbl...
> >> >> >I do have an smtp connector setup. It is using both servers for
local
> >> >> > bridgeheads.
> >> >> > Is this my problem?
> >> >> >
> >> >> > "Ben Winzenz [Exchange MVP]"
<ben_winzenz@NOSPAMdotmessageonedotcom>
> >> > wrote
> >> >> > in message news:Ot0X%238CyEHA.1392@tk2msftngp13.phx.gbl...
> >> >> >> Have you made sure that you enclosed the IP address of the Smart
> > Host
> >> > in
> >> >> >> brackets? [IP.IP.IP.IP]
> >> >> >>
> >> >> >> IIRC, you can either set the FQDN, or if you use the IP, you have
> >> >> >> to
> >> >> > enclose
> >> >> >> it in brackets. Also, do you have any SMTP connectors installed?
> >> >> >> SMTP
> >> >> >> connectors will override the settings on the SMTP Virtual Server,
> >> >> >> so
> >> >> >> if
> >> >> > both
> >> >> >> are set up to send all mail (address space of *), the SMTP
> >> >> >> connector
> >> >> >> wins.
> >> >> >>
> >> >> >> --
> >> >> >> Ben Winzenz
> >> >> >> Exchange MVP
> >> >> >>
> >> >> >>
> >> >> >> "microsoft" <tconley@hooveribcs.com> wrote in message
> >> >> >> news:%23EFRxyCyEHA.3508@TK2MSFTNGP15.phx.gbl...
> >> >> >> > yes, it is part of the same org. I have never read any
microsoft
> >> >> >> > docs
> >> >> >> > recommending any different.
> >> >> >> > The internal server is setup to send all messages to a
smarthost
> >> > which
> >> >> > is
> >> >> >> > the ip address of the server in the dmz.
> >> >> >> > "Ben Winzenz [Exchange MVP]"
> > <ben_winzenz@NOSPAMdotmessageonedotcom>
> >> >> > wrote
> >> >> >> > in message news:u5v9LkCyEHA.4064@TK2MSFTNGP10.phx.gbl...
> >> >> >> >> Um - I seriously hope that the Exchange server in your DMZ
isn't
> >> > part
> >> >> > of
> >> >> >> > the
> >> >> >> >> same Exchange org. Exchange doesn't belong in a DMZ - period.
> >> >> >> >> A
> >> >> > simple
> >> >> >> >> SMTP server - sure, but not Exchange.
> >> >> >> >>
> >> >> >> >> That aside, how do you have the internal Exchange SMTP server
> >> >> > configured?
> >> >> >> >> If they are in the same Organization, is the server in the DMZ
> >> >> > configured
> >> >> >> > as
> >> >> >> >> the bridgehead server in the routing group? If they are in
> >> >> >> >> separate
> >> >> >> >> orgs,
> >> >> >> >> have you configured your SMTP VS to send all mail to a Smart
> >> >> >> >> host
> >> > (the
> >> >> >> > smart
> >> >> >> >> host being the server in the DMZ)?
> >> >> >> >>
> >> >> >> >> --
> >> >> >> >> Ben Winzenz
> >> >> >> >> Exchange MVP
> >> >> >> >>
> >> >> >> >>
> >> >> >> >> "Travis" <Travis@discussions.microsoft.com> wrote in message
> >> >> >> >> news:58CB3323-2151-4591-B73C-3D80034AEA26@microsoft.com...
> >> >> >> >> > here is my situation:
> >> >> >> >> > 2 exchange 2003 servers, one on local network that handles
> > mail,
> >> > and
> >> >> >> >> > public
> >> >> >> >> > folders, and one in the dmz that should only be handling
> > internet
> >> >> > mail
> >> >> >> >> > inbound and outbound. Inbound internet mail works just fine.
> >> >> >> >> > Outbound
> >> >> >> > mail
> >> >> >> >> > is
> >> >> >> >> > going out through the exchange 2003 server that is in my
local
> >> >> > network
> >> >> >> >> > though. This works most of the time, but if anyone sends to
> >> >> >> >> > anyone
> >> >> > who
> >> >> >> >> > requires a reverse dns record to receive mail will not
accept
> >> >> >> >> > mail
> >> >> > from
> >> >> >> > us
> >> >> >> >> > because the reverse record goes to out to the server in the
> > dmz.
> >> >> >> >> > What
> >> >> >> >> > do
> >> >> >> > I
> >> >> >> >> > need to do to get all outbound mail to go out through the
> > correct
> >> >> >> > server?
> >> >> >> >> > I
> >> >> >> >> > thought my smtp virtual server was configed correct, but I
> > guess
> >> >> >> >> > not.
> >> >> >> >> > Thanks
> >> >> >> >>
> >> >> >> >>
> >> >> >> >
> >> >> >> >
> >> >> >>
> >> >> >>
> >> >> >
> >> >> >
> >> >>
> >> >>
> >> >
> >> >
> >>
> >>
> >
> >
>
>

Relevant Pages

  • Re: Unable to join AD domain from DMZ network
    ... the server from the DMZ registered the ... unless you lock it down to a specific port. ... authentication from DMZ to 2003 AD internal network. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Outbound ports
    ... Destination Port 80 outbound ... I would never allow more than port ... >resource need) (or inbound for the DMZ). ... arguing that you meant "outbound from the WAN to the DMZ"? ...
    (comp.security.firewalls)
  • Re: OWA connectivity
    ... First though I'd like to admit I made a mistake in talking about SMTP port ... Secondly opening these ports from your DMZ towards your LAN is not insecure ... Whether or not you use a proxy server in this setup is up to you. ... I feel is not a true firewall and should be used as ...
    (microsoft.public.exchange.admin)
  • Re: No inbound email from external domains -- please help!
    ... I did...changed the outbound port for the smarthost to 587 per comcast's ... If I telnet to your server, ... using SMTP connector to ...
    (microsoft.public.windows.server.sbs)
  • Re: Unable to join AD domain from DMZ network
    ... > the captured traffic between the server in DMZ to the DC from internal ... >> unless you lock it down to a specific port. ... >>> authentication from DMZ to 2003 AD internal network. ...
    (microsoft.public.windows.server.active_directory)