Welcome to ISAserver.org

why am i getting Smtp error?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Server Publishing >> why am i getting Smtp error?

Page: [1] 2 next > >>

Message

<< Older Topic Newer Topic >>

why am i getting Smtp error? - 28.Apr.2005 1:29:00 AM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

Server publishing rule [Inbound SMTP Server] that maps 192.168.0.10:25 TCP to 10.0.0.10:25 for protocol [SMTP Server] was unable to bind a socket for the server. The server publishing rule cannot be applied.
Why am i getting this error? this is suppose to route mail to my exchange which is located at 192.168.0.10:25.Funny thing is even with this error every time i reboot my mail still appears to work.?????

Post #: 1

Featured Links*

RE: why am i getting Smtp error? - 30.Apr.2005 7:40:00 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Sunny,

Is the SMTP service installed and running on the ISA firewall? If so, disable it.

HTH,
Tom

(in reply to Sunny.C)

Post #: 2

RE: why am i getting Smtp error? - 1.May2005 6:46:00 AM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

no it is not. The thing i don't understand is if the rule is not working... how am i getting mail? does the system policy rule have anything to do with it?? What's the next step i should look into?

(in reply to Sunny.C)

Post #: 3

RE: why am i getting Smtp error? - 1.May2005 1:44:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Sunny,

disable the server publishing rule and run the command netstat -ano | find ":25" on the ISA server. If something is listening on TCP port 25 it should be listed. The last column will show you the PID of the process. With the help of the the Windows Task Manager you can then find the Image Name of the process.

HTH,
Stefaan

(in reply to Sunny.C)

Post #: 4

RE: why am i getting Smtp error? - 3.May2005 7:22:00 AM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

i've done that nothing seems to be conflicting.

(in reply to Sunny.C)

Post #: 5

RE: why am i getting Smtp error? - 3.May2005 8:23:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Sunny,

hmm... please post the result of the command ipconfig /all on ISA unmodified.

Thanks,
Stefaan

(in reply to Sunny.C)

Post #: 6

RE: why am i getting Smtp error? - 6.May2005 5:22:00 AM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

Windows IP Configuration

Host Name . . . . . . . . . . . . : isa
Primary Dns Suffix . . . . . . . : domain.com.au
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : Yes
DNS Suffix Search List. . . . . . :
domain.com.au

Ethernet adapter External:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-02-55-56-66-9E
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.0.10
Subnet Mask . . . . . . . . . . . : 255.0.0.0
Default Gateway . . . . . . . . . : 10.0.0.254
DNS Servers . . . . . . . . . . . : 192.168.0.11
NetBIOS over Tcpip. . . . . . . . : Disabled

Ethernet adapter Internal:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek RTL8139 Family PCI Fast Ethernet
NIC
Physical Address. . . . . . . . . : 00-E0-4C-07-53-6F
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.11
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.0.11

(in reply to Sunny.C)

Post #: 7

RE: why am i getting Smtp error? - 6.May2005 7:30:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Sunny,

so your Internal network definition contains *only* the network ID 192.168.0.0/24 and there is a NAT relationship between the Internal and the External network. Correct?

Is the external interface some type of PPPoE connection or is it just plain Ethernet?

HTH,
Stefaan

(in reply to Sunny.C)

Post #: 8

RE: why am i getting Smtp error? - 8.May2005 3:42:00 AM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

yes there is nat between internal & external. The external contains a nic going out to a router. The Router is has a DMZ to the external nic.

(in reply to Sunny.C)

Post #: 9

RE: why am i getting Smtp error? - 8.May2005 1:40:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Sunny,

you didn't answer all my questions! [Razz]

Q1: does your Internal network definition contains *only* the network ID 192.168.0.0/24?

Q2: Is the external interface some type of PPPoE connection or is it just plain Ethernet? The reason for this questions is that the Network ID 10/8 is rather large for just a router connection.

Also, you said in one of you previous posts "The thing i don't understand is if the rule is not working... how am i getting mail?". Did you already investigate from where the mail is coming in? Take a NetMon trace and check out the layer-2 (MAC) and layer-3(IP) addresses.

HTH,
Stefaan

(in reply to Sunny.C)

Post #: 10

RE: why am i getting Smtp error? - 9.May2005 2:53:00 AM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

q1:yes it only contains network ID 192.168.0.0/24.

q2:Yes it's a DSL PPPoE connection.

q3:The mail is coming from 10.0.0.10 port 25 which it should be coming from. [Confused]

(in reply to Sunny.C)

Post #: 11

RE: why am i getting Smtp error? - 9.May2005 9:13:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Sunny,

to elaborate further on "Q2:Yes it's a DSL PPPoE connection", is the PPPoE client running on ISA or in the router?

You said "The mail is coming from 10.0.0.10 port 25 which it should be coming from". The IP address 10.0.0.10 is the ISA External interface. How can that be the source for incoming mail? That don't sounds good to me!

HTH,
Stefaan

(in reply to Sunny.C)

Post #: 12

RE: why am i getting Smtp error? - 10.May2005 3:27:00 AM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

Q2:The PPPoE is running on the router.
my router is at 10.0.0.254 i have the router dmz to my external nic 10.0.0.10, is this right?
Also this is what i get if i use "netstat -ano | find ":25"
TCP 10.0.0.10:2565 0.0.0.0:0 LISTENING 2236
??? [Confused]

(in reply to Sunny.C)

Post #: 13

RE: why am i getting Smtp error? - 10.May2005 3:36:00 AM

LLigetfa

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline

Do you have antivirus running on the ISA box blocking port 25?

(in reply to Sunny.C)

Post #: 14

RE: why am i getting Smtp error? - 10.May2005 4:53:00 AM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

The only virus product i have running on the isa is Trend Server Protect, as far as i know that doesn't block port 25.

(in reply to Sunny.C)

Post #: 15

RE: why am i getting Smtp error? - 11.May2005 3:40:00 PM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

spouseele
any ideas?

(in reply to Sunny.C)

Post #: 16

RE: why am i getting Smtp error? - 13.May2005 11:06:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Sunny,

let's summarize what we have so far:
- publising rule fails because ISA complains that the socket can not be bound.
- disabling the publishing rule and run netstat -ano | find ":25" doesn't show a listening process on that socket.
- there seems to be inbound mail from the source IP 10.0.0.10 TCP port 25 (ISA external interface).

Hmm... that doesn't make any sense to me! You are sure the above info is correct?

HTH,
Stefaan

(in reply to Sunny.C)

Post #: 17

RE: why am i getting Smtp error? - 14.May2005 3:33:00 AM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

yes but when i do netstat -ano | find ":25", i get TCP 10.0.0.10:2565 0.0.0.0:0 LISTENING 2236...
I'm confused. Ok what rules should i have to get mail working correctly... i will try to do it from the start.

(in reply to Sunny.C)

Post #: 18

RE: why am i getting Smtp error? - 14.May2005 9:57:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Sunny,

quote:
yes but when I do netstat -ano | find ":25", i get TCP 10.0.0.10:2565 0.0.0.0:0 LISTENING 2236...

That means that process ID 2236 listen on IP address 10.0.0.10 TCP port 2565. The SMTP Server protocol uses TCP port 25 inbound as specifications. That's quite something different.

Assuming you want your Exchange box to handle the outbound and inbound mail for your domain, you need to do the following steps:

1) make sure the Exchange box is configured as a SecureNAT client only. So, *no* Firewall client should be installed.

2) create an access rule to allow the SMTP protocol (TCP Port 25 Outbound) from a Network Object of type Computer containing the internal IP address of the Exchange box to External and apply it to a All Users. This will enable outbound mail.

3) create a server publishing rule to allow the SMTP Server protocol (TCP Port 25 Inbound) from External to the internal IP address of the Exchange box. This will enable inbound mail.

HTH,
Stefaan

(in reply to Sunny.C)

Post #: 19

RE: why am i getting Smtp error? - 16.May2005 1:22:00 AM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

i have added the inbound rule manualy instead of using the mail wizard. The error does not come up any more, and when i do the netstat -ano | find ":25", i get nothing at all. Mail is still working fine. [Confused]

(in reply to Sunny.C)

Post #: 20