Welcome to ISAserver.org

Unable to Publish SMTP Server

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Server Publishing >> Unable to Publish SMTP Server

Page: [1]

Message

<< Older Topic Newer Topic >>

Unable to Publish SMTP Server - 27.May2005 6:34:00 AM

garethedmondson

Posts: 14
Joined: 25.May2005
From: Swansea, South Wales
Status: offline

Hi Guys,

I am having trouble publishing my SMTP (IMail7) server which is on our 10.180.8.x network.

My Local Education Authority collect the mail, through MX records and forward it to our external card on the ISA server. I have then published the mail server to forward this to our mail server.

Originally I recevied an error message about a network listener. I read up about it and so defined a network rule for incoming mail. This still isn't working.

The mail server is configured to try internal and external DNS servers (do I have to allow external queries with an ISA rule?). It is also set in Route mode.

Any help appreciated,

Many thanks

Gareth Edmondson

Post #: 1

Featured Links*

RE: Unable to Publish SMTP Server - 27.May2005 9:30:00 AM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Gareth,

When you say forward, are you saying that its an inbound SMTP relay for your mail server?

Thanks!
Tom

(in reply to garethedmondson)

Post #: 2

RE: Unable to Publish SMTP Server - 13.Jun.2005 4:55:00 AM

garethedmondson

Posts: 14
Joined: 25.May2005
From: Swansea, South Wales
Status: offline

Hi Tom,

When I say forward what I mean is forward through the external card to the mail server which is hiding behind the firewall.

We know the external card is working because HTTP access is coming in and out. We simply cannot see why Port 25 is not coming through.

I have tried telnetting through to the external card but it is blocked.

Cheers

Gareth

(in reply to garethedmondson)

Post #: 3

RE: Unable to Publish SMTP Server - 13.Jun.2005 5:31:00 AM

garethedmondson

Posts: 14
Joined: 25.May2005
From: Swansea, South Wales
Status: offline

I am just wondering if there is more information I can give you. Because of the LEA setup we have to have everything on the same subnet and IP range etc.

The external gateway used by the ISA server is 10.180.15.254 - this works and has always worked.

The internal card of the ISA server is 10.180.8.4 with a subnet of 255.255.248.0

The external card of the ISA server is 10.180.10.4 again with a subnet of 255.255.248.0

The mailserver is 10.180.8.1/255.255.248.0

This is how the LEA have told us to set things up and which worked with a Linux box.

Hope this extra information helps somewhere.

Gareth

(in reply to garethedmondson)

Post #: 4

RE: Unable to Publish SMTP Server - 13.Jun.2005 7:01:00 AM

garethedmondson

Posts: 14
Joined: 25.May2005
From: Swansea, South Wales
Status: offline

Somebody has just told me that I cannot have the external and internal cards on the same IP range and subnet which totally messes everything up for me as I cannot change my IP range and so if this is correct will have to dump ISA as a firewall.

Gareth

(in reply to garethedmondson)

Post #: 5

RE: Unable to Publish SMTP Server - 16.Jun.2005 8:01:00 AM

tinto

Posts: 225
Joined: 9.Sep.2004
From: Italy
Status: offline

quote:
Originally posted by Gareth Edmondson:
Somebody has just told me that I cannot have the external and internal cards on the same IP range

I think you can define Internal network and External with all the IPs you like.
But... are you sure to need a firewall?

(in reply to garethedmondson)

Post #: 6

RE: Unable to Publish SMTP Server - 16.Jun.2005 10:26:00 AM

LLigetfa

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline

Well, I disagree with Tinto. ISA follows the subnetting rules of the OS. From what I see, you have the internal and external in the same subnet.

I'm too lazy to dig up my subnet calculator, but the mask on the internal and external does not look right. If you want to subnet your class 'A', you can. I have mine subnetted and it works. Firewall perfectionists will scoff at it however.

My 10.0.0.0 scope is subnetted with my clients in 10.198.0.0 with a 255.255.0.0 mask and my ISA server external NIC is 10.199.255.254 with a mask of 255.255.255.252.

(in reply to garethedmondson)

Post #: 7