Small Business Server 2003 - cannot retrieve email from exchange server on smart phones and cannot access remote web workplace thru internet.

Posted on 2011-10-20
Last Modified: 2012-05-12
We have a small business server 2003.  Exchange server was configured as well as remote web workplace.  All was working fine for the last 2 years up until 2 days ago.  Yesterday I was informed that the ISP called them and informed them a pc on the network was phishing for bank information via the web.  They cut of their internet until the problem was resolved.

We discovered that a client who rents office space from us had a pc infected with a virus.  The pc was then removed from the network.  We called the ISP and they confirmed that the issue was resolved and allowed us to access the internet again.

Well now our smart phones do not receive emails from the server and we cannot access the remote web workplace thru the internet.  I can ping the server from outside our network.  Our exchange server is receiving emails and they are being relayed to the users.

This is what we have tried:
1. Rebooted the server
2. Run the internet connection wizard.  I did this because in ther services list, I noticed there were several services related to microsoft exchange that were disabled.
3. We have verified with the ISP that they are not blocking any ports.
4. I disabled the firewall temporarily but that didnot work.
5. I pinged our server from outside of our network got a reply.

Im not sure what to check next.  I thought maybe our server was infected and scanned it with symantec but no virus or trojan was found.

Any suggestions?

Question by:rrincones
    LVL 76

    Assisted Solution

    by:Alan Hardisty
    Visit and run the Exchange Activesync test (no Autodiscover) and specify manual server settings.

    What does that throw up in the results?
    LVL 77

    Expert Comment

    by:Rob Williams
    When the ISP re-enabled your service might they have assigned you a different public IP?

    Author Comment

    @Robwill. The ip did not change.

    @alanhardisty. The test result failed on validating the certificate name. It states: Host name doesnt match any name found on the server certificate CN=localhost, O=Internet wiedgits pty ltd, s=some-state, c=us
    LVL 76

    Accepted Solution

    The website is pointing to an Apache Server - which could either mean you have a new server suddenly popped up and catering for your website, or it could mean you have an unwelcome visitor on your server and it is not running Apache on it as part of the virus / infection you have recently been victim of.

    Check what is running on your server and run the following in a command prompt:

    netstat -anbp tcp >c:netstat.txt

    Then type netstat.txt and look for port 443 - what process is listening on port 443?

    Author Comment

    @alanhardisty:  Thanks.  I will award you points.  

    I checked IIS and noted that the default website and company web were not running.  When I tried to start them, I received an error.  When I looked up the error, I was directed to a microsft page that listed as a possible solution, the steps you listed above.

    I found that the reporting feature on Symantec Endpoint Manager was using ports 80 and 443.  The process was listed as httpd.exe.  It indeed uses apache.  I ended the process and started the default website and company web.  Everything is working now.

    One question:  How were you able to determine the website is pointing to an apache server?
    LVL 76

    Expert Comment

    by:Alan Hardisty
    How I found this out was by visiting - that showed an Apache web server sitting there instead of IIS.

    Glad you sorted it - well done.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Free Trending Threat Insights Every Day

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
    You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now