[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 600
  • Last Modified:

Can't send email to external

Hi Experts,

I have an exchange server 2003, everything was working just fine and there was no change since last few weeks.
But suddenly nobody can't send email to external (yahoo,gmail..etc). We can only recieve email from external (yahoo,gmail...etc).

We can only send and recieve email from people who is in our domain only.

Here is the general map of my network:
exchange --switch--firewall--public internet

What do I have to do to trouble shoot this problem?
Thanks.
0
SJCA
Asked:
SJCA
  • 5
  • 4
  • 3
  • +2
2 Solutions
 
rsaffelCommented:
Check DNS, check routes.
0
 
SJCAAuthor Commented:
Sorry for stupid question, how do you check dns and routes?
0
 
rfportillaCommented:
One possibility is that your company may have been blacklisted.  THis is a common problem.  Many email servers control spam with shared blacklist services.  If your company was added to a blacklist then you will be blocked from many servers.  

An easy way to check email is to send by telnet.  If you have a yahoo account you can use the template below.  Open the command prompt and run the following line:

    telnet g.mx.mail.yahoo.com 25

Modify the following template with your own mail server (instead of "emaildomain.com") and your own exchange email (instead of MyEmail@emaildomain.com) and your own yahoo email (instead of myemail@yahoo.com).  See if you get any errors.  If not, check the yahoo account.  You may need to look in the spam mail folder.


HELO emaildomain.com
MAIL FROM: MyEmail@emaildomain.com <MyEmail@emaildomain.com>
RCPT TO: myemail@yahoo.com <myemail@yahoo.com>
Data
From: MyEmail@emaildomain.com
Subject: Test Email

this is a test email
.
quit

Open in new window

0
Identify and Prevent Potential Cyber-threats

Become the white hat who helps safeguard our interconnected world. Transform your career future by earning your MS in Cybersecurity. WGU’s MSCSIA degree program was designed in collaboration with national intelligence organizations and IT industry leaders.

 
SJCAAuthor Commented:
I finally tested the dns, everything looks fine.

But when I did the tracert from home back to my mail server IP, I see almost every line is ' *        *        *     Request timed out.' What could be the problem?
0
 
SJCAAuthor Commented:
Will it possible a firewall issue?
0
 
rfportillaCommented:
There are many possibilities.  Firewall is an option.  If you use the script I gave you, it will help to narrow down the issue.  

Why would you suggest firewall?  Did someone change something on the firewall?
0
 
Alan HardistyCo-OwnerCommented:
Is some mail leaving your server or no mail leaving your server?

If no mail - please check with your ISP that they have not cut off port 25 outbound access - some do without warning and this will explain loads.

If it is just a few - you may not be configured correctly.

When you send mail, you tell the receiving server your Fully Qualified Domain Name (e.g., mail,yourdomain.com), this has to resolve in DNS back to the IP Address that you are sending from and also have to have Reverse DNS that matches your FQDN.

If anything is wrong here - you will have problems sending mail to some domains.

It will be easier if you can post your domain name and IP Address which I can hide for you (to protect your identity) then checks can be made and your configuration checked.
0
 
Tech-NotesCommented:
How does your Exchange server send his email ?
There 2 options here, by dns or through a smarthost.

You can find this setting in the Exchange Management console in the connectors.
If your server is set to a smarthost, you should try to telnet to this host and try to send a mail like rfportilla showed you. If this doens't work check the settings with your provider.
0
 
rfportillaCommented:
@Tech-Notes If the OP is not using a smarthost, then they should def check telnet to check mail b/c they are not going through anyone else.  If it is a smarthost environment, then complain to the smarthoster and let them fix it.  (Thanks for the support) ;-)

FYI, smarthosts are usually a good idea b/c it offloads this kind of issue.  They are specialized to handle mail and are usually more aware of blacklists and how to stay off them.  It also limits the liability when you have a virus attack in your office that starts spamming (which is how most companies end up getting blacklisted).  When your internet IP and mail IP are the same , there is a higher risk of mail getting affected.
0
 
Alan HardistyCo-OwnerCommented:
>>FYI, smarthosts are usually a good idea b/c it offloads this kind of issue.  They are specialized to handle mail and are usually more aware of blacklists and how to stay off them<<

Whilst I agree with the above in general - there are some smarthosts / ISPs that this does not apply to:

http://alanhardisty.wordpress.com/2010/11/09/demons-thus-telecom-response-about-their-mail-servers-being-blacklisted-do-they-give-a-damn/
0
 
rfportillaCommented:
@alanhardisty True enough.  There are plenty of exceptions.  Even still, I think that in most cases they are better than relying on the overworked system administrator who barely has time to maintain the network, nevermind read up on the latest spam hacks and blacklisting strategies and how to defend against them.  It definitely gets to be a pain.
0
 
Alan HardistyCo-OwnerCommented:
I guess it depends on what Anti-Spam software / Hardware you use.

We get no spam and virtually zero Administration to keep it that way.
0
 
rfportillaCommented:
@alanhardisty That's awesome if you have a solution that good.  I've used a few spam solutions, but they haven't taken care of outgoing issues (usu. viruses on unprotected networks) and they don't make up for poorly configured Exchange servers.  :-p-
0
 
Alan HardistyCo-OwnerCommented:
Nothing ever makes up for badly configured Exchange Servers.

I use Forefront TMG and Vamsoft.  Forefront kills lots of bad connections and Vamsoft cleans the rest up.  It also has an Auto-Sender whitelist, so if you send an email to someone, when they reply, it is already whitelisted.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 5
  • 4
  • 3
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now