Solved

Need help with ISA and Outlook

Posted on 2004-08-23
5
211 Views
Last Modified: 2013-11-16
Posted in wrong place earlier... Sorry

I need help...

I am running ISA, but not exchange, I have web access but not POP3 or smtp access.  I believe I have the protocals set up properly.  I can't telnet to the remote ports. ( 25 or 110) The remote mail server is not on site.  It is not on the same subnet or domain.  I have win 2003 server.  

I can recieve Hotmail ( Excuse me, I forgot... I am useing Outlook and Outlook Express.) I can also recieve mail through webmail ... which I don't have an open port for(???)

I can not send or recieve any mail.  Every thing else seems to be working... (I haven't tested my FTP publishing yet.)  

oh...  this happens with and without firewall client installed.

I can't think of any other info.. if you need something else please ask...

I'm getting desperate at this point... thanks in advance...
0
Comment
Question by:BigIron18
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 35

Expert Comment

by:Bembi
ID: 11886804
You have a client using Outlook (Express) and you try to connect to an external Mail Server via POP3 / SMTP, right?

For this you nee within ISA:
A protocoll definition for outgoing port 25 TCP traffic
A protocoll definition for outgoing port 110 TCP traffic

A site ans content rule, which is not denying this traffic
A protocol rule, which is not denying this traffic

Note that, independend from rule definitions, which are allowing all outgoing traffic, that this only means, that all protocols are allowed you have protocol definitions for.
0
 

Author Comment

by:BigIron18
ID: 11888307
I have all that in place.  I also should say it was working until about 5 days ago.  It seems to have stopped by itself... I've reinstalled I've updated everything I can think of.  I can't think of any thing else to try.

We did add a rule for Yahoo games ( to allow) that's working well.  Ftp works. Telnet works (Just not to the mail server...on either port).

Any help will be looked at as a kindness...
0
 

Expert Comment

by:japoye
ID: 11891472
Make sure that you have the IP services installed! Go to the Add and Remove Programs under the control panel. Then go to the Windows components install section. Look around for a TCP/IP Services selection in one of the categories. Install it and restart. You should be good to go.
0
 
LVL 35

Accepted Solution

by:
Bembi earned 500 total points
ID: 11896265
Japoye do not mean the Simple TCP/IP services (daytime, quote of the day etc.), I assume, isn't it? Simple TCP/IP services is useless and a security risk.

You mean, you can not telnet your mail server on port 25?
Can you telnet othermail servers on port 25 (or 110)?
What is the response if you try it? Nothing? Or do you get any messages.
Can you ping your / other mail servers?
(Make an MX NSLookup to find the mail servers for a specified domain).

As SPAM protection is a little bit hysteric at the moment, it may be, that your server is simply blocked out. This is usually the case, if you use a dynamic external IP-address. Most of the providers do only allow a connection to their server, if you send an authentication.

Also note, that it is a difference, if you try it from ISA itself or from a client. The client uses site and content rules as well as protocol rules, ISA server itself need a IP packet filter definition. For test purposes, try to add a IP packet filter for TCP 25 outgoing, local any and remote 25, and try to telnet your mail server directly from ISA.

 
0
 

Author Comment

by:BigIron18
ID: 11905320
I allready tried all of that stuff.  this was a tricky one...

Fixed the problem myself.... sorry for the trouble
0

Featured Post

IoT Devices - Fast, Cheap or Secure…Pick Two

The IoT market is growing at a rapid pace and manufacturers are under pressure to quickly provide new products. Can you be sure that your devices do what they're supposed to do, while still being secure?

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
Visualize your data even better in Access queries. Given a date and a value, this lesson shows how to compare that value with the previous value, calculate the difference, and display a circle if the value is the same, an up triangle if it increased…
Suggested Courses

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question