Re: POP3 E-mail Issue After Swing Migration

I never did fix this on my system but your post got me looking again because
I think this is a common problem. After some research I think I found the
key. Looking over Harry's Advanced SBS2003 book I found this little tidbit
in the ISA application blocking section:

"Tom Shinder explains:
The default setting for Outlook is set to 1 (disabled) because we don?t
want users to access external SMTP and POP3 servers. They should
only be using POP3 and SMTP servers under corporate control. In
addition, there can be some issues with new mail notifications if you
set it to 0 (enable). By setting the value to 0, and then creating access
rules that require authentication, the Outlook client can?t access the
Internet servers because they can?t authenticate as SecureNAT clients
(if they are configured as SecureNAT clients)."

I think this default setting is what's causing our issue. Maybe try
changing it in the ISA Server Management Console, Server, Configuration,
General, click Define Firewall Client Settings - Application Settings tab.

Let me know how you do.

--
Allan Williams



"Bill Glidden" <billyg1943@xxxxxxxxxxx> wrote in message
news:ePaoERcQGHA.2816@xxxxxxxxxxxxxxxxxxxxxxx
Hi Dave,

Using ISA logging, I can see that POP3 is being denied to all users except
the POP3 connector! Now, how in the heck do I fix this?! All users are
members of the Internet Users Group.

Cheers,
Bill
"Dave Nickason [SBS MVP]" <gwdibble@xxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:e1Gu5ZWQGHA.2816@xxxxxxxxxxxxxxxxxxxxxxx
I've never tried this, but I would think the users would have to be in
the Internet Users security group for this to work. What you can do is
remote into the SBS from a desktop. Open ISA and click Monitoring. On
Tasks, click Start Query. Flip back to the desktop and initiate a POP
connection. After it fails, flip back to SBS/ISA. Stop the query and
scroll through until you find what blocked it (probably easiest to look
for the desktop's IP).

Why are you doing POP this way instead of using the SBS POP connector? I
can give you a long list of reasons why, if you can't do regular SMTP,
you should use the POP connector instead. One of them is that it avoids
the issue you're having now, but also centralized configuration,
monitoring, troubleshooting, backup, virus scanning.....


"Bill Glidden" <billyg1943@xxxxxxxxxxx> wrote in message
news:%23qRjSoVQGHA.3944@xxxxxxxxxxxxxxxxxxxxxxx
Yes, the ISA firewall client is installed. What about security groups.
Do users need to be members of Internet Users?

"Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@xxxxxxxxxxx>
wrote in message news:epLCB9SQGHA.1556@xxxxxxxxxxxxxxxxxxxxxxx
ISA doesn't block this. Got the ISA firewall clients on the
workstations?

Bill Glidden wrote:
Client has POP3 accounts configured in Outlook. When I replaced SBS
2000 server with SBS 2003 + ISA 2004 those accounts do not work any
more. Message in Outlook indicates that the POP3 server cannot be
reached. How can I fix this please? I am assuming that ISA is
blocking but I am not exactly conversant with it. Can someone please
set me straight and point me at a how-to for this?










.

Relevant Pages

  • Re: 70-291 test - unfair
    ... and looked through the objectives to see if I had sat the correct exam! ... If I knew that ISA servers ...
    (microsoft.public.cert.exam.mcsa)
  • Re: 2.6.12.2 dies after 24 hours
    ... >> so we take the few percent performance hit for something that doesn't ... > Interesting - When I got the problem it was on mail servers under high ... some patches to try and fix it for both reiserfs and ext3, ... > prepare_writeallocates space, starts a transaction ...
    (Linux-Kernel)
  • Re: GPG encryption of binary sample requested.
    ... zlib was reacting to corrupt data. ... I did some loop tests & grabbing data half way with sftp & found: ... Data served back via POP3 is corrupted from my remote FreeBSD popd servers ...
    (freebsd-hackers)
  • Re: CheckPoint + ISA2004 Nating
    ... You will have to publish the servers on ISA. ... publishing can be done based on the ... There is no NATing to DMZ from Checkpoint. ...
    (microsoft.public.isa.configuration)
  • Re: SSL Certificate for three servers
    ... You were right it is SSL Bridging, ... It's good to hear that ISA 2004 will improve on things - I just hope it ... >> other Win2003 servers in the network behind the SBS ISA firewall. ... Now that I need to get a trusted SSL certificate for all ...
    (microsoft.public.windows.server.sbs)