Re: Configure ISA for emails

Hello Andrew,

Thank you for posting here.

According to your description, I understand that you want to configure IP
Packet Filters in ISA 2000 to allow internal clients access external POP3
and SMTP. If I have misunderstood the problem, please don't hesitate to let
me know.

Based on my research, after you run the CEICW, the POP3 and SMTP IP Packet
Filters will setup automatic, we no need to setup the POP3 and SMTP IP
Packet Filters manually.

Method 1:
Go through the follow KB and Rerun CEICW carefully.

How to configure Internet access in Windows Small Business Server 2003
http://support.microsoft.com/kb/825763/en-us

Method 2:
If you want to setup the POP3 and SMTP IP Packet Filters manually, I
suggest you to setup two filters separate for POP3 and SMTP, but not one
filter to allow all remote ports. Setup filter to allow all remote ports
will make internal clients can access all external services but no only
POP3 and SMTP as your request.

The two filters like following:

POP3:
IP protocol: TCP
Direction: Outbound
Local port: All ports
Remote port: 110

SMTP:
IP protocol: TCP
Direction: Outbound
Local port: All ports
Remote port: 25

Please restart the ISA firewall service and web proxy service after you
manually setup the filters.

Then, you can test on the internal clients.

If the internal workstations still can not access external POP3 and SMTP,
please install ISA firewall client on all workstations:

Install ISA firewall client on all workstations
On each workstation, please access \\SBSServerName\mspclnt\, then run
setup.exe.

Hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: "Andrew Wan" <andrew_wan1980@xxxxxxxxxxx>
| References: <e3wm4b5bHHA.3616@xxxxxxxxxxxxxxxxxxxx>
| Subject: Re: Configure ISA for emails
| Date: Mon, 26 Mar 2007 12:17:48 +0100
| Lines: 21
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.3028
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
| X-RFC2646: Format=Flowed; Original
| Message-ID: <eqTzqi5bHHA.3584@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups:
microsoft.public.backoffice.smallbiz2000,microsoft.public.isa,microsoft.publ
ic.isa.configuration,microsoft.public.isa.enterprise,microsoft.public.isaser
ver,microsoft.public.windows.server.sbs
| NNTP-Posting-Host: host217-37-215-49.in-addr.btopenworld.com 217.37.215.49
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.isa:2090
microsoft.public.isa.configuration:1054 microsoft.public.isa.enterprise:187
microsoft.public.isaserver:441 microsoft.public.windows.server.sbs:25387
microsoft.public.backoffice.smallbiz2000:493
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| This seems to provide internal LAN checking of SMTP/POP3 emails. However,
is
| this the correct IP Packet Filter setup? Will this be a hazard or is this
| safe?
|
|
| "Andrew Wan" <andrew_wan1980@xxxxxxxxxxx> wrote in message
| news:e3wm4b5bHHA.3616@xxxxxxxxxxxxxxxxxxxxxxx
| >I managed to configure the "IP Packet Filters" of MS ISA Server 2000 to
| > allow internal LAN check for POP3/SMTP emails. However I am confused as
to
| > how I got it setup.
| >
| > TCP Outbound Dynamic
| > IP protocol: TCP
| > Direction: Outbound
| > Local port: Dynamic
| > Remote port: All ports
| >
| >
| >
|
|
|

.

Relevant Pages

  • Re: Exchange issue
    ... I never insisted he use port 25 or any other port. ... His question wasn't even about whether or not to use his pop connector, ... from Verizon with dynamic IP for 6 years, using SMTP. ... Besides, if it works with POP3, why wouldn't ...
    (microsoft.public.windows.server.sbs)
  • SMTP Blasted
    ... Windows server 2003, set up smtp and pop3. ... But not only have I not even tried it yet but the damn port ...
    (microsoft.public.inetserver.iis.smtp_nntp)
  • Re: Gateway >> Mail Server
    ... >> passing the mail to Exchange by SMTP. ... although it's worth a Google for the specific ISP you use ... It defaults to passing the mail to port 25 of localhost, ... It can collect by POP3, ...
    (comp.os.linux.security)
  • Re: Antispam problem with POP3 connector
    ... ISP should have some filters for your POP3 accounts. ... My advice is that you switch to SMTP and then follow the instructions on ... I want a antispam function. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 / Echange 2003 Questions?
    ... If your ISP supports SMTP and if you have asked him to forward to your ... mail with forwarding port 25 to your external nic-IP from your router. ... > downloading my internet correspondence using the POP3 ...
    (microsoft.public.windows.server.sbs)