Can't send email to external

Hi Experts,

I have an exchange server 2003, everything was working just fine and there was no change since last few weeks.
But suddenly nobody can't send email to external (yahoo,gmail..etc). We can only recieve email from external (yahoo,gmail...etc).

We can only send and recieve email from people who is in our domain only.

Here is the general map of my network:
exchange --switch--firewall--public internet

What do I have to do to trouble shoot this problem?
Thanks.
LVL 1
SJCAAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
Alan HardistyConnect With a Mentor Co-OwnerCommented:
Is some mail leaving your server or no mail leaving your server?

If no mail - please check with your ISP that they have not cut off port 25 outbound access - some do without warning and this will explain loads.

If it is just a few - you may not be configured correctly.

When you send mail, you tell the receiving server your Fully Qualified Domain Name (e.g., mail,yourdomain.com), this has to resolve in DNS back to the IP Address that you are sending from and also have to have Reverse DNS that matches your FQDN.

If anything is wrong here - you will have problems sending mail to some domains.

It will be easier if you can post your domain name and IP Address which I can hide for you (to protect your identity) then checks can be made and your configuration checked.
0
 
rsaffelCommented:
Check DNS, check routes.
0
 
SJCAAuthor Commented:
Sorry for stupid question, how do you check dns and routes?
0
What Kind of Coding Program is Right for You?

There are many ways to learn to code these days. From coding bootcamps like Flatiron School to online courses to totally free beginner resources. The best way to learn to code depends on many factors, but the most important one is you. See what course is best for you.

 
rfportillaConnect With a Mentor Commented:
One possibility is that your company may have been blacklisted.  THis is a common problem.  Many email servers control spam with shared blacklist services.  If your company was added to a blacklist then you will be blocked from many servers.  

An easy way to check email is to send by telnet.  If you have a yahoo account you can use the template below.  Open the command prompt and run the following line:

    telnet g.mx.mail.yahoo.com 25

Modify the following template with your own mail server (instead of "emaildomain.com") and your own exchange email (instead of MyEmail@emaildomain.com) and your own yahoo email (instead of myemail@yahoo.com).  See if you get any errors.  If not, check the yahoo account.  You may need to look in the spam mail folder.


HELO emaildomain.com
MAIL FROM: MyEmail@emaildomain.com <MyEmail@emaildomain.com>
RCPT TO: myemail@yahoo.com <myemail@yahoo.com>
Data
From: MyEmail@emaildomain.com
Subject: Test Email

this is a test email
.
quit

Open in new window

0
 
SJCAAuthor Commented:
I finally tested the dns, everything looks fine.

But when I did the tracert from home back to my mail server IP, I see almost every line is ' *        *        *     Request timed out.' What could be the problem?
0
 
SJCAAuthor Commented:
Will it possible a firewall issue?
0
 
rfportillaCommented:
There are many possibilities.  Firewall is an option.  If you use the script I gave you, it will help to narrow down the issue.  

Why would you suggest firewall?  Did someone change something on the firewall?
0
 
Tech-NotesCommented:
How does your Exchange server send his email ?
There 2 options here, by dns or through a smarthost.

You can find this setting in the Exchange Management console in the connectors.
If your server is set to a smarthost, you should try to telnet to this host and try to send a mail like rfportilla showed you. If this doens't work check the settings with your provider.
0
 
rfportillaCommented:
@Tech-Notes If the OP is not using a smarthost, then they should def check telnet to check mail b/c they are not going through anyone else.  If it is a smarthost environment, then complain to the smarthoster and let them fix it.  (Thanks for the support) ;-)

FYI, smarthosts are usually a good idea b/c it offloads this kind of issue.  They are specialized to handle mail and are usually more aware of blacklists and how to stay off them.  It also limits the liability when you have a virus attack in your office that starts spamming (which is how most companies end up getting blacklisted).  When your internet IP and mail IP are the same , there is a higher risk of mail getting affected.
0
 
Alan HardistyCo-OwnerCommented:
>>FYI, smarthosts are usually a good idea b/c it offloads this kind of issue.  They are specialized to handle mail and are usually more aware of blacklists and how to stay off them<<

Whilst I agree with the above in general - there are some smarthosts / ISPs that this does not apply to:

http://alanhardisty.wordpress.com/2010/11/09/demons-thus-telecom-response-about-their-mail-servers-being-blacklisted-do-they-give-a-damn/
0
 
rfportillaCommented:
@alanhardisty True enough.  There are plenty of exceptions.  Even still, I think that in most cases they are better than relying on the overworked system administrator who barely has time to maintain the network, nevermind read up on the latest spam hacks and blacklisting strategies and how to defend against them.  It definitely gets to be a pain.
0
 
Alan HardistyCo-OwnerCommented:
I guess it depends on what Anti-Spam software / Hardware you use.

We get no spam and virtually zero Administration to keep it that way.
0
 
rfportillaCommented:
@alanhardisty That's awesome if you have a solution that good.  I've used a few spam solutions, but they haven't taken care of outgoing issues (usu. viruses on unprotected networks) and they don't make up for poorly configured Exchange servers.  :-p-
0
 
Alan HardistyCo-OwnerCommented:
Nothing ever makes up for badly configured Exchange Servers.

I use Forefront TMG and Vamsoft.  Forefront kills lots of bad connections and Vamsoft cleans the rest up.  It also has an Auto-Sender whitelist, so if you send an email to someone, when they reply, it is already whitelisted.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.