My Exchange 5.5 behind ISA
I used Mail Wizard,
Set SMTP to inbound and outbound.
SMTP works POP3 does not.
When I connect to mail.domain.com with Outlook Express I get an error:

Your server has unexpectedly terminated the connection. Possible causes for this include server problems, network problems, or a long period of inactivity. Account: 'mail.domain.com', Server: 'mail.domain.com', Protocol: POP3, Port: 110, Secure(SSL): No, Error Number: 0x800CCC0F

So I set Rule to allow any POP,
set Filter to allow any pop from any remote to internal Exchange.
I'm getting the same error.
I reinstalled ISA It did not help.
I searched all message boards and site,
but get no hint.

Thank You for Your Response.

1. After the WinSock Proxy client is working, additional settings are required for server proxy on the Exchange Server computer. You must create two Wspcfg.ini files for the Exchange Server computer.

Create the first Wspcfg.ini file for use with the Exchange SMTP service. Type the four lines of information below into Notepad and save this file as Wspcfg.ini in the directory where Msexcimc.exe is located.

NOTE: Do NOT save the file in Unicode format. The SMTP port (25) on the Exchange Server computer will then be bound to the Proxy Server's port 25. On computers with Internet Information Server version 4.0 (IIS), stop and disable the SMTP service from starting. The SMTP service, an optional Windows NT Option Pack service, also uses port 25. Copy only the four lines of text below; do not copy the blank lines above or below.
2.
3. [MSEXCIMC]
4. ServerBindTcpPorts=25
5. Persistent=1
KillOldSession=1
NOTE: The SMTP port (25) on the Exchange Server computer is then bound to the Proxy Server's port 25. Also, the default location of the MSEXCIMC.EXE file is:
c:\exchsrvr\connect\msexcimc\bin\msexcimc.exe
Create the second Wspcfg.ini file for use with the Exchange information store (Store.exe). Copy and Paste the four lines of information below into Notepad (DO NOT MANUALLY TYPE THE INFORMATION) and save this file as Wspcfg.ini in the directory where Store.exe is located. Also, the default location of store.exe follows:
c:\exchsrvr\bin\store.exe
NOTE: Do NOT save the file in Unicode format.

[STORE]
ServerBindTcpPorts=110,119,143
Persistent=1
KillOldSession=1
NOTE: Additional ports, such as ports 119 and 143 shown above, can be listed because Store.exe provides Network News Transfer Protocol (NNTP) on port 119, POP mail on port 110, and so on.

NOTE: When you configure the Exchange Server to use IMAP4 mail or secure mail, Exchange Server connects to ports 993 and 995 on the Proxy Server. To make this work, edit the Wspcfg.ini file located in the folder where the Exchange Store.exe file is located. These port must be bound to the external interface on the Proxy Server. The changes to the Wspcfg.ini file are as follows:

[Store]
ProxyBindIp=993:<PROXY_SERVER_ADDRESS>,995:<PROXY_SERVER_ADDRESS>
ServerBindTCPPorts=993,995
KillOldSession=1
Persistent=1
NOTE: For these changes to work properly, you must apply Service Pack 1 to Microsoft Proxy 2.0 as well as the solution described in the following article:
Q232588 Winsock Proxy Client Fails to Bind Remotely to Proxy Server Computer
2. Verify that the two Wspcfg.ini files do NOT have a .txt extension appended. This will occur if your Internet Explorer interface settings are set to default values. The file may appear as Wspcfg.ini.txt. Rename the file if necessary.
3. Restart Exchange Server.

Simon

quote:

---

Originally posted by simontea:
Please help.

My Exchange 5.5 behind ISA
I used Mail Wizard,
Set SMTP to inbound and outbound.
SMTP works POP3 does not.
When I connect to mail.domain.com with Outlook Express I get an error:

Your server has unexpectedly terminated the connection. Possible causes for this include server problems, network problems, or a long period of inactivity. Account: 'mail.domain.com', Server: 'mail.domain.com', Protocol: POP3, Port: 110, Secure(SSL): No, Error Number: 0x800CCC0F

So I set Rule to allow any POP,
set Filter to allow any pop from any remote to internal Exchange.
I'm getting the same error.
I reinstalled ISA It did not help.
I searched all message boards and site,
but get no hint.

Thank You for Your Response.

---

That worked for me.

Thanks

Simon

------------------
MicroSoft Fan
UNIX Fan
Linux Fan
*************************
True System Administrator

I have configured many MANY Exchange 5.5 servers running on Windows NT 4.0 SP5 to work with ISA Server, so I know that it does work. However, I always configure them as SecureNAT clients, since there's no compelling reason to configure them as Firewall clients.

One things that does not seem to work is accessing the POP3 server via the external interface when you are *on the internal network*. From the external network, it works fine.

HTH,
Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/

quote:

---

Originally posted by tshinder:
Hi Simon,

I have configured many MANY Exchange 5.5 servers running on Windows NT 4.0 SP5 to work with ISA Server, so I know that it does work. However, I always configure them as SecureNAT clients, since there's no compelling reason to configure them as Firewall clients.

One things that does not seem to work is accessing the POP3 server via the external interface when you are *on the internal network*. From the external network, it works fine.

HTH,
Tom

---

Tom:
I think he has disorder the ISA server configuration. Maybe install a clean NT/Exchange server 5.5 and then reinstall the ISA server is the best choice.
Or install a test environment for test this configuration. When everything is ok, copy the current configurator to the ISA server.

Good luck...

------------------
MicroSoft Fan
UNIX Fan
Linux Fan
*************************
True System Administrator

That might be the best way to go. However, I would like to see how it works as a SecureNAT client and make the publishing rules again and see if it works right.

Thanks!

Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/

Thank you.

------------------
MicroSoft Fan
UNIX Fan
Linux Fan
*************************
True System Administrator

Thank you for all your notes.

I set now ISA as a firewall in the real environment. So I cannot test it any more.
But I'm going to build ISA for testing
VPN on another computer and I will set up
POP3 Server as NAT client and let you know if that worked for me. It did not worked at the first place but I could make an mistake. Did you try to set POP3 Internal Server as Firewall Client and did it worked?

Simon

Yes, please let us know how it works for you when you put together your test ISA Server.

Read my article on setting up a mail server at www.isaserver.org/shinder and see if that helps you.

Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/

Get it Here!

I am getting the same errors as Simon, but my Outlook 2000 clients are trying to directly connect to my ISP's SMTP and POP3 server not an internal Mail Server.

I am running ISA by itself and have configured it according to Tom's getting started guide ( All Open ). I have a DSL connection and browsing the web works fine.

As far as DNS goes it seems to be working as my clients both SNAT and Firewall (for testing)are able to resolve the ISP's DNS server (nslookup). If client is setup as a firewall client it can receive POP3 but not send mail. If SNAT client, Outlook gets the same error for both sending and receiving.

Thanks in advance,

Nick

Believe it or not, I've heard several people with the same problem tell me that they were able to get this working by reinstalling ISA Server.

Give it a try and let us know how that works for you.

HTH<
Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/

Get it Here!

Thanks for your help, this seems to have worked!

Regards

Nick

By the way the book is great. I've only got the soft copy though as the book takes a number of weeks to get to OZ as it is not available here.