Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> DMZ >> DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY Page: [1]
Login
Message << Older Topic   Newer Topic >>
DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY - 28.Aug.2008 9:18:37 AM   
hamper

 

Posts: 9
Joined: 28.Aug.2008
Status: offline
Hi,

I have a trileg DMZ with private ip. Ihave a web server that has to communicate with a external SMTP server. When setting upp access rule SMTP from DMZ(Webserver) to External(MailServer), i see that the connection is initiated but after a while i will get 0xC0040038 FWX_E_TCP_NO_SERVER_REPLY. If i try connecting from the firewall i can connect to the mailserver and send the mail.

RSS is disabled.

What am i missing?
Post #: 1
RE: DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY - 28.Aug.2008 9:52:46 AM   
pwindell

 

Posts: 782
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline
Please post the exact specs of the SMTP Access Rule you created.


_____________________________

Phillip Windell
www.wandtv.com

(in reply to hamper)
Post #: 2
RE: DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY - 28.Aug.2008 10:07:33 AM   
hamper

 

Posts: 9
Joined: 28.Aug.2008
Status: offline
(SMTP)Port 25 (Outbound)(No filter)
From Webserver Adress(Private DMZ) 192.168.1.2
To External Ip of mailserver.
All users

Have tried AllProtocols from DMZ to External, doesnt help.
Is there a routing problem on return?(How would i find that)

(in reply to pwindell)
Post #: 3
RE: DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY - 28.Aug.2008 11:14:53 AM   
hamper

 

Posts: 9
Joined: 28.Aug.2008
Status: offline
To get mail from Firewall to work i also have to add External Adress to From in SMTP.

(in reply to hamper)
Post #: 4
RE: DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY - 28.Aug.2008 1:21:31 PM   
paulo.oliveira

 

Posts: 792
Joined: 3.Jan.2008
From: Amazonas, Brazil
Status: offline
Hi,

did you published your SMTP server using a server publishing rule?

Regards,
Paulo Oliveira.

(in reply to hamper)
Post #: 5
RE: DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY - 28.Aug.2008 4:16:15 PM   
hamper

 

Posts: 9
Joined: 28.Aug.2008
Status: offline
No i havent published a SMTP server, im only trying to get access to the ISP's SMTP server. The login works and it responds from the firewall but not in the DMZ?

Regards,
Per


(in reply to paulo.oliveira)
Post #: 6
RE: DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY - 28.Aug.2008 4:24:47 PM   
pwindell

 

Posts: 782
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline
While sitting at the Web Server,...
Open a commend prompt
Type:  "Telnet <mail server IP#> 25" [Enter]

What happens?

What do the ISA Log Monitor say?

_____________________________

Phillip Windell
www.wandtv.com

(in reply to hamper)
Post #: 7
RE: DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY - 28.Aug.2008 4:39:37 PM   
hamper

 

Posts: 9
Joined: 28.Aug.2008
Status: offline
The isa log monitor
Initiating connection, (My rule to allowaccess), 0x0 Error_Success
1 minute and 10 seconds later
Closed Connection (My rule to allowaccess), 0xc0040038 FWX_E_TCP_NO_SERVER_REPLY

In additional information i se 152 bytes sent and 0 bytes received.

I know the login works the strange thing is im not getting any response!

Do you want me to run Telnet?

Regards

(in reply to pwindell)
Post #: 8
RE: DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY - 28.Aug.2008 4:42:34 PM   
hamper

 

Posts: 9
Joined: 28.Aug.2008
Status: offline
I have two published websites that are working on this server and they are reachable from external network.

(in reply to hamper)
Post #: 9
RE: DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY - 28.Aug.2008 4:53:00 PM   
paulo.oliveira

 

Posts: 792
Joined: 3.Jan.2008
From: Amazonas, Brazil
Status: offline
Hi,

can you ping the destination address? It seems a routing problem.

Regards,
Paulo Oliveira.

(in reply to hamper)
Post #: 10
RE: DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY - 28.Aug.2008 4:59:27 PM   
hamper

 

Posts: 9
Joined: 28.Aug.2008
Status: offline
Sorry should have tried that first, no i can't ping the mail server from the webserver, i finds the adress but doesnt get a response.
¨
so how do i go about trying to fix this?

Regards
Per

(in reply to paulo.oliveira)
Post #: 11
RE: DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY - 28.Aug.2008 5:08:10 PM   
hamper

 

Posts: 9
Joined: 28.Aug.2008
Status: offline
Should Perimiter access to External be NAT instead of Route?

(in reply to hamper)
Post #: 12
RE: DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY - 28.Aug.2008 5:22:16 PM   
paulo.oliveira

 

Posts: 792
Joined: 3.Jan.2008
From: Amazonas, Brazil
Status: offline
Hi,

that´s for sure! Because you´re using private addres in the perimeter network.
Your network rules should be like this: perimeter -> NAT -> External

Regards,
Paulo Oliveira.

(in reply to hamper)
Post #: 13
RE: DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY - 28.Aug.2008 5:28:56 PM   
hamper

 

Posts: 9
Joined: 28.Aug.2008
Status: offline
Thats it, Thanks alot for the fast and good response.

Regards Per

(in reply to paulo.oliveira)
Post #: 14
RE: DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY - 28.Aug.2008 5:30:23 PM   
paulo.oliveira

 

Posts: 792
Joined: 3.Jan.2008
From: Amazonas, Brazil
Status: offline
Hi Per,

no probs. Glad you did it! Thanks for follow up.

Regards,
Paulo Oliveira.

(in reply to hamper)
Post #: 15
RE: DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY - 29.Aug.2008 9:22:17 AM   
pwindell

 

Posts: 782
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline
You can not ping anything if you didn't create a Rule to allow Ping.  Ping is not automatically allowed,...it is automatically denied unless you setup Rules to allow it.

Forget ping

Test with Telnet.

_____________________________

Phillip Windell
www.wandtv.com

(in reply to hamper)
Post #: 16
RE: DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY - 29.Aug.2008 4:13:07 PM   
paulo.oliveira

 

Posts: 792
Joined: 3.Jan.2008
From: Amazonas, Brazil
Status: offline
Hi Phillip,

I expressed myself wrong, after I posted my reply I realize that.
When I said ping, I meant to say if the connection between the source and destination was OK.

Sorry Per about that, but I think you got what I meant.

Regards,
Paulo Oliveira.

(in reply to pwindell)
Post #: 17
RE: DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY - 29.Aug.2008 4:55:26 PM   
pwindell

 

Posts: 782
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline
No problem

Sounds like it is working now, I guess?

_____________________________

Phillip Windell
www.wandtv.com

(in reply to paulo.oliveira)
Post #: 18

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> DMZ >> DMZ tri-legs. SMTP out, FWX_E_TCP_NO_SERVER_REPLY Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts