Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 775
  • Last Modified:

Can't telnet to smtp server outside of network

Having issues with 2010 exchange and getting mail to go out, so i tested from the exchange server telnet on port 25 to a mailserver, and it times out, it resolves with nslookup and responds to ping, just won't telnet,  so i thought, ok, ill try from a different machine, same thing, all workstations can't telnet out on port 25, looking at firewall rules etc and notice they have a gpo of some sort dealing with the firewall.  Could that be the problem or is it a router issue possibly?
0
jasonmichel
Asked:
jasonmichel
  • 7
  • 5
  • 3
  • +3
3 Solutions
 
TasmantCommented:
i don't think it's linked with your router as you can ping outside computers. therefore we need to consider that you are well NAT translated.
but we can clearly suppose your firewalls rules don't allow you to go out on port 25, which is an issue, especially for your Exchange server (could be good for computers).
maybe could you be clearer with "gpo of some sort dealing with the firewall" if you want to get more details ? :)
0
 
Alan HardistyCo-OwnerCommented:
The other option that is possible is that your ISP has port 25 blocked outbound as an anti-spam measure, but you would need to rule out your firewall as the problem first before beating on the door of your ISP.
0
 
Suliman Abu KharroubIT Consultant Commented:
Please test smtp on http://mxtoolbox.com

if it fails, check the exchange services...information store...
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
GundogTrainerCommented:
alanhardisty sounds the most plausable explanation if your having the issue on all clients.

I would try and telnet to the SMTP server of your ISP as if you were using a standard mail client.
If that works then its most likely your ISP preventing users from spamming and you may need to forward mails through this smarthost rather than deliver direct.
0
 
GundogTrainerCommented:
Forgot to ask, can you telnet to port 25 on your exchange server from a local client ?
This would test if it was a possible GPO \ client firewall iss or is at or beyond the gateway.
0
 
Marius GunnerudSenior Systems EngineerCommented:
from your smtp server go to http://canyouseeme.org/ enter port 25 and see if the port shows as open
0
 
Alan HardistyCo-OwnerCommented:
The question states:

"Having issues with 2010 exchange and getting mail to go out"

How is checking the inbound port going to help?
0
 
jasonmichelAuthor Commented:
I can telnet into my exchange from inside and outside fine
0
 
Alan HardistyCo-OwnerCommented:
Did this work before and recently it stopped?
0
 
jasonmichelAuthor Commented:
Fresh exch 2010 install...so hadn't had to test before....never had issues with send connector to inet before...usually pretty simple
0
 
Alan HardistyCo-OwnerCommented:
Have you sent mail out from your IP before using port 25?
0
 
jasonmichelAuthor Commented:
Yes from an icewarp server we are currently migrating from
0
 
Alan HardistyCo-OwnerCommented:
Is the Icewarp server still connected?
0
 
jasonmichelAuthor Commented:
I believe so, but dns internally has been changed and the statements in router have been changed
0
 
Alan HardistyCo-OwnerCommented:
Ah - okay - I was just thinking about changing the IP of a client to that of the Icewarp box and testing telnet from there.

Sounds like the router changes got messed up.

Can you check them please - seems the most logical place to check.
0
 
jasonmichelAuthor Commented:
I can telnet from outside to exchange fine?
0
 
GundogTrainerCommented:
I think what alanhardisty meant was there may be an IP filter on the router to block port 25 from everyone except the mail server.
You have updated the port forwarding rule for inbound traffic, but is there an outbound filter applied ?
0
 
Alan HardistyCo-OwnerCommented:
Yep - that's what I meant.

If you could send out before the changes to the router on the Icewarp IP - try setting a PC up as the same IP and test with Telnet.  If that works - you know the issues is a firewall / router issue.

If not - then it is still probably the router / firewall.
0
 
TasmantCommented:
that's what i said in the first answer ...
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 7
  • 5
  • 3
  • +3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now