RE: Exch5.5sp4 w/ISA outgoing smtp timeout problem...

  • From: "Lippman, Michael" <Michael.Lippman@xxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 31 Jan 2002 13:07:47 -0500

I had a problem with Outbound mail in a back to back configuration.  I
ended up calling Microsoft PSS support.  Our problem was that the SMTP
rule that was created on the external ISA server was not allowing SMTP
requests to other domains. Once we changed that setting to any
everything worked. 

For testing purposes I would do a protocol rule that allows all IP
traffic and see if your mail starts working.  That will at least narrow
it down.  I first thought we were having a DNS problem but that wasn't
the case.

MRL

-----Original Message-----
From: isa@xxxxxxxxxxxxxxxxx [mailto:isa@xxxxxxxxxxxxxxxxx] 
Sent: Thursday, January 31, 2002 2:11 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Exch5.5sp4 w/ISA outgoing smtp timeout problem...

http://www.ISAserver.org


Hi All,

We had to re-install a client's ISA over the weekend. We used their
GHOSTed W2K Server install, plus a run of the ISA installer without
message filtering in integrated mode and then used a Restore of the
config. We then used Windows Update to bring the bits of W2K up-to-date.

Now we get a weird problem from the published Exchange 5.5sp4 server
which was not altered. It sits on 192.168.0.10, with an ISA Secure Mail
Server rule accepting incoming SMTP on the external NIC to the Exchange
machines IP. The usual rules are created, including SMTP/SMTPS outgoing.

The Exchange machine is configured as SecureNAT (ie. gateway out is
192.168.0.1 - the ISA machine).

Almost no email will go outbound. You can sit at the Exchange machine
and type "telnet mail.domain.com 25" and get that domains SMTP server
banner. The Exchange machine's event Log reports that the SMTP lookup
works, and a session is openned. Sometime later (5mins?) there is a
warning event, that the SMTP session timed out.

DNS appears okay too. You can sit at the Exchange machine, type
"nslookup mail.domain.com", and/or set the query type to MX and get a
DNS answer no problems.

I originally put ISA sp1 on, then disabled the SMTP filter as I was
interested in whether or not this site would be effected by the sp1 bug.
I've not rolled back sp1, AND tried removing/reinstalling ISA, but no
improvement.

Incoming mail is fine, and there are no client browsing problems. ISA
doesn't appear to log any problem either.

WTF?

Regards,

Connor!

-----------------------------------------------------------
    Connor Moran                 Projectset Australia
  Ph: +618 94791831                     Pty Ltd
cpm@xxxxxxxxxxxxxxxxx       Computer Publishing Specialists
-----------------------------------------------------------


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
Michael.Lippman@xxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: