techwizz40
asked on
Outlook Express unable to connect to exchange externally to retreive email
We recently had a server that we put a re-load of SBS 2003. We made no changes to our DSL router, we are running exchange email and internally everything works fine. However we have three people that connect using outlook express from external offices as they are on the road all the time. Since the reload, they cannot download their email. They are not able to connect to the exchange server. I have asked them to use OWA but habits and seniority are defeating me. I did check the Microsoft Exchange POP3 and it is running. Any help would be greatly appreciated, I'm running out of excuses as to why i don't have it working.
Recreate the users?
Hi techwizz40,
what are the errors that the clients get?
what are the errors that the clients get?
oops sorry irwin
One thought; is the new SBS the same local IP as before? If not the router port forwarding would need to be changed to the new IP.
besides pop3 services and server u must have this option checked in the relay section inorder for pop3 to work for external clients....
"Allow all computers which authenticate to relay,regardless of list above"
"Allow all computers which authenticate to relay,regardless of list above"
ASKER
The error message that they receive is "the specified server was found, but there waas no response from the server. Please verify that the port and SSL information is correct.
Regrding the comment from Vahik Where is the "Allow all computers which authenticate to relay information located?
The Server IP did not change.
Regrding the comment from Vahik Where is the "Allow all computers which authenticate to relay information located?
The Server IP did not change.
hmm can you ping via name?
is your POP3 service deffinitely running
is your POP3 service deffinitely running
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
When setting up the new server, assuming SP1 is installed, it will enable the firewall and block external traffic by default. Has it been disabled or configured to allow the remote users access?
I'm going to repeat something: The RSA keys for the new server will not be valid; that means, the CA Certificate won't be valid, and if you're depending on anything using this Certificate, then the new server is not recognised by the signing authorities, i.e., it is not recognised as you, your domain.
Nor should it be. That's why it's telling you about the SSL and why you shouldn't get a response from the server, in addition to the default being a very stupid "block port 53 DNS." Ever if I were wrong about this, you would need to check it because logically the key pairs can't be the same for two different machines.
If the keys were correctly regenerated [I don't know what you mean by a "reload," do you mean reinstall, reboot, what?] the three users may be using the wrong hash to connect, or they may not have relay privileges from their locations.
Basically, the only way you're going to get answers are to use Ethereal and do a packet capture somehow.
Let's say they're at a hotel. Are they trying to use the hotel's servers to relay mail from the hotel's mail server to your mail server? See what I mean? You need a network analysis, and probably from one of their machines at a remote location, even if only a nearby hotel.
You have some work cut out for you.
What do their computers have in their EventViewers?
You got to start somewhere, and their EventViewer is a good place.
Nor should it be. That's why it's telling you about the SSL and why you shouldn't get a response from the server, in addition to the default being a very stupid "block port 53 DNS." Ever if I were wrong about this, you would need to check it because logically the key pairs can't be the same for two different machines.
If the keys were correctly regenerated [I don't know what you mean by a "reload," do you mean reinstall, reboot, what?] the three users may be using the wrong hash to connect, or they may not have relay privileges from their locations.
Basically, the only way you're going to get answers are to use Ethereal and do a packet capture somehow.
Let's say they're at a hotel. Are they trying to use the hotel's servers to relay mail from the hotel's mail server to your mail server? See what I mean? You need a network analysis, and probably from one of their machines at a remote location, even if only a nearby hotel.
You have some work cut out for you.
What do their computers have in their EventViewers?
You got to start somewhere, and their EventViewer is a good place.
ASKER
Hmmmm.. When we did a reload, we wiped out the drive a re-installed SBS 2003. However i left the DSL/router configurations the same as the IP addresses both external and internal are the same. I did add myself as a user and tested the outlook capabilities and still no reply. I can ping the DSL/Gateway but not the server (external) IP.
Do you have a VPN set up? I assume you are testing from the external/Internet side of your DSL, if you do not have a VPN, ICMP requests (pings) or other services will be blocked unless specifically configured to be forwarded to the server. I doubt ICMP requests are as that would be a security risk and there is no need. Do you have any other services you can test the basic connection and that a software firewall is not blocking access, such as remote desktop or telnet?
"When we did a reload, we wiped out the drive a re-installed SBS 2003."
It's for sure you've lost your keys, but if the DSL can't ping the first hop, then something's wrong in the DSL.
If you can get to the .1 of your public IP Address, you should be able to get past it, unless you haven't authenticated with your ISP's DSLAM [ a good case for reinstalling the DSL modem entirely]
It's for sure you've lost your keys, but if the DSL can't ping the first hop, then something's wrong in the DSL.
If you can get to the .1 of your public IP Address, you should be able to get past it, unless you haven't authenticated with your ISP's DSLAM [ a good case for reinstalling the DSL modem entirely]
ASKER
Port 110 was the answer as well as I also had to re-run the ICECW. Thanks for all you help
Welcome
are they logging in with
domain\usernam\mailbox alias?