Welcome to ISAserver.org

SMTP Relay

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Server Publishing >> SMTP Relay

Page: [1]

Message

<< Older Topic Newer Topic >>

SMTP Relay - 23.Feb.2005 7:02:00 PM

Raul E Jimenez

Posts: 78
Joined: 21.Oct.2002
From: USA
Status: offline

Hi There,

I consulted the following documents for our LAB Corporate configuration for the SMTP realy having Exchange BE..FE..ISA Firewall whit SMTP Relay base on the SMTP Virtual protocol fro IIS 6.0.

http://www.isaserver.org/articles/2004outboundsmtprelay.html

http://www.isaserver.org/articles/2004inboundsmtprelay.html

Now, for inbound SMTP Relay, no problem, for outbound we found that eventhough the e-mails were relayed to the local host and the system policies were set up for allow SMTP to External and Internal from Everywhere, the e-mails never leave the Local Host.

I opened a case whit Microsoft and they took the SMTP Virtual protocol out of the configuration and create a mail server publishing rule that is working fine since then, whit the consecuent reduce on security.

Any idea why did not work?

Post #: 1

Featured Links*

RE: SMTP Relay - 1.Mar.2005 2:14:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Raul,

I'm not sure what you did to change it. What was removed?

Thanks!
Tom

(in reply to Raul E Jimenez)

Post #: 2

RE: SMTP Relay - 1.Mar.2005 7:37:00 PM

Raul E Jimenez

Posts: 78
Joined: 21.Oct.2002
From: USA
Status: offline

Hi Tom,

They requested to move the IIS SMTP virtual services from the ISA Firewall and created a mail publishing rule pointing to the internal FE servers which runs SMTP services and is the Site Connector. Also, this server will be our OWA and RPC over HTTP.

Since then everything is working fine, I am using the SecureNat client on the Exchange FE server and create several routing rules on this server for all the subnets we have in our topology.

Not having the IIS SMTP virtual server creates some security issues and I am still loking to go back to the configuration you have in your documents. For that reason I am creating a Virtual LAb to do some testing. [Wink]