Solved

Can't telnet to smtp server outside of network

Posted on 2011-03-09
20
758 Views
Last Modified: 2012-06-21
Having issues with 2010 exchange and getting mail to go out, so i tested from the exchange server telnet on port 25 to a mailserver, and it times out, it resolves with nslookup and responds to ping, just won't telnet,  so i thought, ok, ill try from a different machine, same thing, all workstations can't telnet out on port 25, looking at firewall rules etc and notice they have a gpo of some sort dealing with the firewall.  Could that be the problem or is it a router issue possibly?
0
Comment
Question by:jasonmichel
  • 7
  • 5
  • 3
  • +3
20 Comments
 
LVL 11

Accepted Solution

by:
Tasmant earned 167 total points
ID: 35083582
i don't think it's linked with your router as you can ping outside computers. therefore we need to consider that you are well NAT translated.
but we can clearly suppose your firewalls rules don't allow you to go out on port 25, which is an issue, especially for your Exchange server (could be good for computers).
maybe could you be clearer with "gpo of some sort dealing with the firewall" if you want to get more details ? :)
0
 
LVL 76

Assisted Solution

by:Alan Hardisty
Alan Hardisty earned 167 total points
ID: 35083599
The other option that is possible is that your ISP has port 25 blocked outbound as an anti-spam measure, but you would need to rule out your firewall as the problem first before beating on the door of your ISP.
0
 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 35083607
Please test smtp on http://mxtoolbox.com

if it fails, check the exchange services...information store...
0
 
LVL 8

Expert Comment

by:GundogTrainer
ID: 35083998
alanhardisty sounds the most plausable explanation if your having the issue on all clients.

I would try and telnet to the SMTP server of your ISP as if you were using a standard mail client.
If that works then its most likely your ISP preventing users from spamming and you may need to forward mails through this smarthost rather than deliver direct.
0
 
LVL 8

Expert Comment

by:GundogTrainer
ID: 35084017
Forgot to ask, can you telnet to port 25 on your exchange server from a local client ?
This would test if it was a possible GPO \ client firewall iss or is at or beyond the gateway.
0
 
LVL 17

Expert Comment

by:MAG03
ID: 35084212
from your smtp server go to http://canyouseeme.org/ enter port 25 and see if the port shows as open
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35084241
The question states:

"Having issues with 2010 exchange and getting mail to go out"

How is checking the inbound port going to help?
0
 
LVL 1

Author Comment

by:jasonmichel
ID: 35084317
I can telnet into my exchange from inside and outside fine
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35084328
Did this work before and recently it stopped?
0
Are your end users making ugly email signatures?

Have you left it up to your end users to create their own email signatures? Are they forgetting to add the company logo or using garish font colors? Take control and ensure all users have the same email signature.

 
LVL 1

Author Comment

by:jasonmichel
ID: 35084531
Fresh exch 2010 install...so hadn't had to test before....never had issues with send connector to inet before...usually pretty simple
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35084587
Have you sent mail out from your IP before using port 25?
0
 
LVL 1

Author Comment

by:jasonmichel
ID: 35084642
Yes from an icewarp server we are currently migrating from
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35084686
Is the Icewarp server still connected?
0
 
LVL 1

Author Comment

by:jasonmichel
ID: 35084718
I believe so, but dns internally has been changed and the statements in router have been changed
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35084732
Ah - okay - I was just thinking about changing the IP of a client to that of the Icewarp box and testing telnet from there.

Sounds like the router changes got messed up.

Can you check them please - seems the most logical place to check.
0
 
LVL 1

Author Comment

by:jasonmichel
ID: 35084796
I can telnet from outside to exchange fine?
0
 
LVL 8

Assisted Solution

by:GundogTrainer
GundogTrainer earned 166 total points
ID: 35084852
I think what alanhardisty meant was there may be an IP filter on the router to block port 25 from everyone except the mail server.
You have updated the port forwarding rule for inbound traffic, but is there an outbound filter applied ?
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35084875
Yep - that's what I meant.

If you could send out before the changes to the router on the Icewarp IP - try setting a PC up as the same IP and test with Telnet.  If that works - you know the issues is a firewall / router issue.

If not - then it is still probably the router / firewall.
0
 
LVL 11

Expert Comment

by:Tasmant
ID: 35094062
that's what i said in the first answer ...
0

Featured Post

Why are Office 365 signatures so complicated?

Trying to setup transport rules for Office 365 email signatures and can’t quite figure it out? Having to test the signature over and over? Make things simple by using Exclaimer Cloud - Signatures for Office 365.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Network connections wi-fi configuration issue 6 20
Reseller Hosting 2 46
exchange, script 1 28
Exchange 2013:  Disconnected mailbox seems lost 9 15
Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now