Re: Changing Exchange Smarthost settings/SSL

spencer nash wrote:
Hi all,
I have an SBS2003 server setup that until a few hours ago was sending
and receiving email just fine. I've been using a smarthost to relay
email via SBC's SMTP servers. Everything has been working fine. I got
an email recently saying that on March 20th they're changing their
SMTP settings, so I went into exchange to make the changes. The main
point from the email was:
3. Change the POP server to pop.att.yahoo.com.
4. Change the SMTP server to smtp.att.yahoo.com.
5. Change the SMTP port to 465 and check the option labeled Use an
encrypted connection (SSL).
6. Change the POP3 port to 995 and check the option labeled Use an
encrypted connection (SSL).

I went to Exchange System Manager-->Connectors-->SmallBusiness SMTP
Connector and changed the "Forward all mail through this connector"
setting to smtp.att.yahoo.com.
Then I went to the advanced tab, outbound security, and left the
username and password as they were in "Basic Authentication". I
checked the TLS encryption box. I couldn't find anywhere to change the
port.

Then I went to Server-->Protocols-->SMTP-->Default SMTP Server
Properties. On the Delivery Tab-->Outbound security, I again put in
the username and password for SBC and again checked TLS encryption. On
outbound connections I changed the outgoing port to 465. On the
advanced button I put smtp.att.yahoo.com as the FQDN and as the
smarthost.

I go to OWA to send a test email to gmail. Nothing goes through.
Looking at the logs, I'm getting 454 errors, which are "TLS not
available due to temporary reason".

So I'm assuming TLS is not the same as SSL that I'm supposed to use.
Is there anyway to force SSL? It also appears from the logs that
SmartHosting isn't working since it's going straight to google and
bypassing Yahoo.
66.249.92.173 ug-out-1314.google.com SMTPSVC1 XXXSERVER 192.168.1.XXX
0 MAIL 454

So to sum up, is there anyway to have an SSL connection in exchange to
the smart host? And does anyone see my flaw that's bypassing smart
hosting?

Thanks a lot for any suggestions,
Spencer

you'll need an SSL certificate first of all. You can either make one or purchase a commercial one. TLS is NOT the same as SSL.

Oskar

.