• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

SMTP Relay in DMZ

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 Firewall] >> DMZ >> SMTP Relay in DMZ Page: [1]
Login
Message << Older Topic   Newer Topic >>
SMTP Relay in DMZ - 11.Mar.2003 3:49:00 PM   
wim

 

Posts: 15
Joined: 11.Mar.2003
Status: offline
Hi,

We have a tri-homed ISA DMZ configuration. In the DMZ, that is using public IP addressing, we have a SMTP Relay server (W2K with SMTP service).
We want this relay the receive Internet mail and then forward these mail to an internal E2K server that we publushed using a Secure Mail server publishing rule (configured for in-and outbound SMTP mail). We have enabled routing and configured a Custom IP Packet Filter for TCP port 25 for both directions. For incoming mail This works fine.

We ALSO want this SMTP relay server in the DMZ to receive all mail that comes from the Internal E2K server and is send to the Internet. The first part works great. Only the Relay server cannot communicate with an Internet host that we use for some reason. As I mentioned before, we have configured the IP packet filter for both directions, so that should work I guess.

The only thing I could think of is that the Server Publishing rule for the internal server is using port 25 and therfore the relay can only send mail on that port to the internal server and not to an external internet host. If this is the case, then my question is: how can you configure an SMTP relay server in a DMZ for internal AND external relaying????

As a test we have disabled the publish rule for the internal E2K server to see if this would give back port 25, but without results.

Please help!

Thanks,

Wim.
Post #: 1
RE: SMTP Relay in DMZ - 15.Mar.2003 12:01:00 AM   
spouseele

 

Posts: 12826
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi Wim,

have you already looked into the IP packet filter log? You should have two packet filters: one for the inbound smtp traffic (local port = 25) and one for the outbound traffic (remote port = 25). Also, don't forget that the default gateway on the DMZ hosts should be the ISA DMZ interface. You can easily test the packet filters with the telnet command on port 25.

BTW --- I assume you have published the internal mailserver on the ISA DMZ interface only.

HTH,
Stefaan

(in reply to wim)
Post #: 2

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 Firewall] >> DMZ >> SMTP Relay in DMZ Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts