Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1622
  • Last Modified:

Exchange Relay from the DMZ

Exchange to MobileIron in DMZ
Asked by: Tencha
There is a server in the dmz "MobileIron" and we are trying to set up a connection where "mobile iron" server can send e-mail by connecting to Exchange that is located internal.
At this point we have the firewall set up to allow mobile iron to send via port 25. The connection "kinda" works, because from mobile iron server we receive internal email when we test the connection from the application.
Layout Receive:
MobileIron Server- IN DMZ
Cisco ASA Firewall routing from DMZ to TMG server
TMG server to load balancer "Kemp"
From the Kemp  to our primary CAS Array
Layout for Send:
Exact same thing in reverse however there are not restriction or logging.

What is the set-up need to ensure that the mobile iron server within the DMZ can contact the exchange server internally?
0
Tencha
Asked:
Tencha
  • 4
  • 2
1 Solution
 
GusGallowsCommented:
First, what version of Exchange are you using?
Chances are, you just need to add the IP of the DMZ device to the network tab of the  Receive connector in the HUB.
In 2007, it looks like this:
General TabNetwork TabAuthentication TabPermission Group Tab
0
 
TenchaAuthor Commented:
I am on Ex2010 Sp1 I did all those steps and through the various testing I remove all the security check boxes to ensure nothing would prevent the connection. Still didn't work.
Also, I could not add the server to "exchange servers" because it in not part of the internal AD network, hence why this is no so easy.
0
 
Simon Butler (Sembee)ConsultantCommented:
Just follow the guide from the Exchange team for Exchange 2007:
http://blogs.technet.com/b/exchange/archive/2006/12/28/3397620.aspx
It is the same for Exchange 2010. The fact that it is in the DMZ makes no difference other than ensuring the NAT is correct (if used) so that you don't turn Exchange in to an open relay.

Simon.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
TenchaAuthor Commented:
Still not working ...to external. I am able to get e-mail routed from DMZ to internal address accounts. But from the DMZ server "Mobile Iron" I can not route e-mail out using our exchange system.
0
 
Simon Butler (Sembee)ConsultantCommented:
Internal addresses aren't a relay.
Did you setup a new connector? If so, configure logging on it so that you can see what happens when you try to send email. It could be that the IP address Exchange sees is different to the one you think it is, and the wrong connector is being used.

Simon.
0
 
TenchaAuthor Commented:
The same IP address was located within another Relay and had stricter rights. Once I removed the IP from the second relay, mail was working as expected.
0
 
TenchaAuthor Commented:
It was not suggested....
0

Featured Post

Receive 1:1 tech help

Solve your biggest tech problems alongside global tech experts with 1:1 help.

  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now