[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now


TLS emails between 2 organizations can't route properly

Posted on 2010-09-13
Medium Priority
Last Modified: 2012-05-10

I have a SBS server 2003, has run smoothly all the time.  Recently, the client request establish secured (TLS) communication with One external party.

The external part setup their TLS settings, with Certificate Verification Required, and 128bit Encryption Level.

On our server
originally has:
1 network:
1 Default SMTP virtual server;
1 Small Business SMTP Connector

My new configuration:
Point the existing Default SMTP virtual server associated to address;
Added 2nd IP address to the network card:
Created 2nd secured SMTP virtual server, and associated it to 99 address;
purchased and installed Certificate from GoDaddy on secured SMTP virtual server, with FQDN: abc.com.au, (should it be mail.abc.com.au?)
Ticked Require TLS on Access-Authentication (with Anoymous, and Intergrated ticked as well);
Access - Communication: Require Secure Channel, and Require 128 ticked;
Delivery - Outbound Security: require TLS ticked;

Created 2nd connector
General page, I selected use DNS to route to address space..., intended to send email straight out to the destination;
General - Local Bridgehead: pointed to the secured SMTP virtual server;
Address space: smtp destination.com, For Example: microsoft.com;

After all done, I can send email to the external party, and they will receive it;
*if I have my router listen to port 25, and forward to (default SMTP virtual server), and all incoming email are fine, except the needs to be connected external party, their email will be bounced, due to:
503 5.7.0 other side does not support STARTTLS  501 5.6.0 Data format error  

*If I pointed the router to (the secured SMTP server) for port 25, then it will reject all email non encrypted.

Can experts help in here, how do I have normal email go to 100, and secured email from the said external party go to 99?

Thanks in advance.
Question by:mcclewan
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2

Expert Comment

ID: 33670245
For outgoing email, you need to create a new outgoing SMTP connector and specify the address space to the external party domain.

Expert Comment

ID: 33670261
Check out http://www.petri.co.il/configuring-exchange-2007-send-connectors.htm on how to configure send connectors

Author Comment

ID: 33670715
Thanks.  I already have the 2nd connector done, and outgoing reaches the other party.  Issue is incoming secured mail had bounced.

Accepted Solution

mcclewan earned 0 total points
ID: 33750341
Found Problem.  It went through Spam Vendor before reach our exchange server.

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many companies are looking to get out of the datacenter business and to services like Microsoft Azure to provide Infrastructure as a Service (IaaS) solutions for legacy client server workloads, rather than continuing to make capital investments in h…
Worried about if Apple can protect your documents, photos, and everything else that gets stored in iCloud? Read on to find out what Apple really uses to make things secure.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
Suggested Courses

656 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question