Mail Connector - Exchange 2010 Hosted

Hi

I have inherited an Exchange 2010 Hosted system which is hosted in an external DC offshore. The hardware & software belong to my client.

As part of the hosting service, the hosting company have been providing an email gateway to filter out spam etc. but they are decomissiing it and have asked us to use another service.

My client has another system hosted with them (Domino) that uses Googles Pstini service for the email gateway role.

The client wants me to setup the Exchange system to use Postini. That part I'm familiar with and I have created the Email Config and User List in Postini. I have setup the ‘Inbound Server’ to be the external IP of the hosted Exchange 2010 server.

The MX records are in place for the test domain and when I do the MX Record test in Postini, that passes.

When I run the SMTP Message Test the results are: Connecting to electronicvirtualoffice.com
220 Postini ESMTP 106 y680_pstn_c6 ready. CA Business and Professions Code Section 17538.45 forbids use of this system for unsolicited electronic mail advertisements.
HELO postini-qa.com
250 Postini says hello back
MAIL FROM:<test@postini-qa.com>
250 Ok
RCPT TO:<email@testdomainname.com>
451 Can't connect to testdomainname.com - psmtp
QUIT
221 Catch you later
Session complete

It is as thought Postini is not able to deliver messages to the Exchange side of things. I can send email out from this system but when replying, the reply never arrives. No NDR so the email is sitting somewhere.

Is there anything I need to change in Exchange and if so how (I mean, what power shell commands do I use in the EMC?)

Thanks
Mark
LVL 13
Mark GalvinManaging Director / Principal ConsultantAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

James HIT DirectorCommented:
Run the exchange connectivity test..

https://www.testexchangeconnectivity.com/

Run smtp tests.. Post results
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Mark GalvinManaging Director / Principal ConsultantAuthor Commented:
Results:
"
Test Details
      Testing inbound SMTP mail flow for domain 'administrator@electronicvirtualoffice.com'.
       The Microsoft Connectivity Analyzer failed to test inbound SMTP mail flow.
       
      Test Steps
       
      Attempting to retrieve DNS MX records for domain 'electronicvirtualoffice.com'.
       One or more MX records were successfully retrieved from DNS.
       
      Additional Details
       MX Records Host electronicvirtualoffice.com.s200b2.psmtp.com, Preference 40
, Host electronicvirtualoffice.com.s200a1.psmtp.com, Preference 10
, Host electronicvirtualoffice.com.s200b1.psmtp.com, Preference 30
, Host electronicvirtualoffice.com.s200a2.psmtp.com, Preference 20
      Testing Mail Exchanger electronicvirtualoffice.com.s200a1.psmtp.com.
       One or more SMTP tests failed for this Mail Exchanger.
       
      Test Steps
       
      Attempting to resolve the host name electronicvirtualoffice.com.s200a1.psmtp.com in DNS.
       The host name resolved successfully.
       
      Additional Details
       IP addresses returned: 207.126.147.10
      Testing TCP port 25 on host electronicvirtualoffice.com.s200a1.psmtp.com to ensure it's listening and open.
       The port was opened successfully.
       
      Additional Details
       Banner received: 220 Postini ESMTP 137 y680_pstn_c6 ready. CA Business and Professions Code Section 17538.45 forbids use of this system for unsolicited electronic mail advertisements.
      Analyzing SMTP Capabilities for server electronicvirtualoffice.com.s200a1.psmtp.com:25
       SMTP Capabilities were analyzed successfuly.
       
      Additional Details
       SMTP Capabilities were analyzed successfuly.
250-Postini says hello back
250-STARTTLS
250-8BITMIME
250 HELP

      Attempting to send a test email message to administrator@electronicvirtualoffice.com using MX electronicvirtualoffice.com.s200a1.psmtp.com.
       Delivery of the test email message failed.
       
      Additional Details
       The server returned status code -1 - The operation has timed out.
Exception details:
Message: The operation has timed out.
Type: System.Net.Mail.SmtpException
Stack trace:
at System.Net.Mail.SmtpClient.Send(MailMessage message)
at Microsoft.Exchange.Tools.ExRca.Tests.SmtpMessageTest.PerformTestReally()"

I have asked the hosting company to ensure their firewall is not blocking flow between Postini and Exchange
0
Simon Butler (Sembee)ConsultantCommented:
Check there are no restrictions on the Receive Connector on the Exchange server. If they were providing a filter then it is probably restricted to accept email from their server only.
Simon.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Mark GalvinManaging Director / Principal ConsultantAuthor Commented:
Hi

I checked using the  'Get-ReceiveConnector' command and didnt see anything that would indicate this.

Which property field should I be looking at in powershell for a restriction?

Thanks
Mark
0
Simon Butler (Sembee)ConsultantCommented:
Remote IP ranges will show restrictions. If unrestricted it should be 0.0.0.0 - 255.255.255.255.

Simon.
0
Mark GalvinManaging Director / Principal ConsultantAuthor Commented:
Thanks Sembee2

I have checked both Connectors  and both are set to:
RemoteIPRanges                          : {::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff, 0.0.0.0-255.255.255.255}

So I think this leads to the hosting firms firewall.
0
Simon Butler (Sembee)ConsultantCommented:
I would probably agree.

Simon.
0
Mark GalvinManaging Director / Principal ConsultantAuthor Commented:
Arrrrgggghhhhhhhh

Just had conf call with them and they are blocking port 25. So Postini has no chance!!

They are raising a Change Request and once that is in place I can test/
0
James HIT DirectorCommented:
That's what the connectivity test showed. Glad you found the problem.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.