Welcome to ISAserver.org

Publish SMTP server

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Publishing] >> Server Publishing >> Publish SMTP server

Page: [1]

Message

<< Older Topic Newer Topic >>

Publish SMTP server - 6.May2008 8:17:55 PM

bruiser

Posts: 15
Joined: 3.Jul.2002
From: Australia
Status: offline

Hi everyone

I have a number of ISA 2006 servers (both Enterprise and Standard edition)

I have a F5 Load Balanced pair of 2006 Std ed servers as my Production SMTP gateways

The policy rules are

Publish - SMTP Server, All Networks (including local), Internal IP Address
Relay - SMTP, Local Host, Anywhere, All Users

This works flawlesy and handles millions of messages aday....

now in my Test Network I have a single 2006 Ent ed. This server has the exact same SMTP rules. I can telnet to the server on Port 25 from any internal server but cannot connect to the External Interface from an External server. (ISA denys via the Default rule). As a workaround I added an additional Firewall rule that allows SMTP from External to Local Host.

Whats different between Std and Ent that would cause this issue?

Cheers
Bruce

Post #: 1

Featured Links*

RE: Publish SMTP server - 7.May2008 8:46:49 AM

IanC

Posts: 221
Joined: 11.Jul.2007
From: UK
Status: offline

Hi Bruce,

Do both test and production environments have a NAT relationship between Internal to External networks?

Ian

_____________________________

Ian Currie

http://www.curriecomputing.com

(in reply to bruiser)

Post #: 2

RE: Publish SMTP server - 7.May2008 6:30:32 PM

bruiser

Posts: 15
Joined: 3.Jul.2002
From: Australia
Status: offline

Hi Ian

Production is still the default "NAT" but Test has been changed to "Route" as it has to chain to a Squid proxy.

That sounds like the cause to my problem, is the workaround I already have in place the best way to manage it?

thanks
Bruce

(in reply to IanC)

Post #: 3

RE: Publish SMTP server - 9.May2008 5:13:35 AM

IanC

Posts: 221
Joined: 11.Jul.2007
From: UK
Status: offline

Bruce,

A simpler option would be to leave everything as was but direct inbound SMTP traffic to the actual ip address of the internal SMTP server rather than ISA's external intertface.

Cheers

Ian

_____________________________

Ian Currie

http://www.curriecomputing.com

(in reply to bruiser)

Post #: 4