Learn how to a build a cloud-first strategyRegister Now


Problem setting up Exchange 2003 Smart Host

Posted on 2010-01-07
Medium Priority
Last Modified: 2012-05-08
I am trying to setup a client's Exchange 2003 single instance server, to use a Smart Host to send e-mail out to the internet through our filtering appliance.

I have my devices setup for opportunistic TLS for incoming connections.  I created a SMTP Connector on the Exchange 2003 box (didn't use default VS because I wanted to use two smarthosts and I think the VS only accepts one).  I used FQDN for our smarthosts, set everything correctly as I thought and then restarted the necessary services.

On my side, here is what I see in the log files...

Connect from mail.server.net (ip x.x.x.x)
setting up TLS connection from mail.server.net (ip x.x.x.x)
TLS connection established from from mail.server.net (ip x.x.x.x) TLSv1 with cipher RC4-MDF (128/128 bits)

******at this point I have to assume their server connected to mine without problem, using TLS******

Next lines....

NOQUEUE: reject: RCPT from from mail.server.net (ip x.x.x.x):  454 4.7.1 (email address) relay access denied from <> to (email address)

I'm guessing they aren't accepting incoming TLS on their side but not really sure.  any help is appreciated.  This is Exchange 2003 running on SBS2003
Question by:rosederekj
  • 2
  • 2
LVL 14

Expert Comment

ID: 26204639
I would say your filtering device doesn't allow relaying from their server - which would be expected if this is not an open relay.

Basically you will have to allow relaying from this Exchange server's IP and you should be fine ( from mail.server.net (ip x.x.x.x)  )

Author Comment

ID: 26209442
Any additional insight on the 454 4.7.1 codes?  I'm wondering if there is something on their perimiter network causing the problem
LVL 14

Accepted Solution

Wonko_the_Sane earned 2000 total points
ID: 26209595
Not sure... My guess is that your appliance doesn't like the connection from the server, either because it's not authenticating properly, it's not authenticating at all or because it doesn't allow relaying. The error says it's a relaying problem, but the 454 is technically TLS related.

It ultimately depends on the configuration of the appliance. Any chance you can see if it requires authentication to allow relaying? Or if you can allow relaying for unauthenticated hosts (make sure you only allow it for their IP)? Once you know this you can look into how to setup the smart host.

If you can, try doing it without TLS for the test - just to narrow it down more.

Author Closing Comment

ID: 31674261
It did end up being a relay setting on the encryption devices - got that adjusted and everything works now.  Thanks!

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this post, I will showcase the steps for how to create groups in Office 365. Office 365 groups allow for ease of flexibility and collaboration between staff members.
Exchange administrators are always vigilant about Exchange crashes and disasters that are possible any time. It is quite essential to identify the symptoms of a possible Exchange issue and be prepared with a proper recovery plan. There are multiple…
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
Suggested Courses

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question