Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Configuring exchange - port forwards

    Scheduled Pinned Locked Moved NAT
    18 Posts 3 Posters 4.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DerelictD
      Derelict LAYER 8 Netgate
      last edited by

      What happens when you telnet from your exchange server to the mail server on port 587?

      Note that outbound connections such as sending mail don't require a port forward.  They only need outbound NAT (if NAT is necessary).

      Chattanooga, Tennessee, USA
      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
      Do Not Chat For Help! NO_WAN_EGRESS(TM)

      1 Reply Last reply Reply Quote 0
      • DerelictD
        Derelict LAYER 8 Netgate
        last edited by

        @robina80:

        As when I used hmail server I could send and receive on port 587 SMTP so I really don't understand why exchange wont send out using port 587 as hmail worked perfectly using that port

        If you are saying you could send mail to arbitrary mail servers on 587, things weren't working like you think they were.  Most mail servers on the internet require authentication before you can send ANY mail through them - even to the local domains they serve.

        Chattanooga, Tennessee, USA
        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • R
          robina80
          last edited by

          when i have my exchange server on at home, from work i can telnet in on port 587 (my new SMTP send connector) and i get a reply back (220 mail server ready at your service) but when i had my exchange using port 25 (SMTP send connector) i didn't get a response so i can safely say virgin media block port 25 for outgoing emails

          i can receive emails when i make my send connector SMTP port 25 but when i make it port 587 i cant even receive nor even send but i can telnet into it which i dont understand atall

          1 Reply Last reply Reply Quote 0
          • DerelictD
            Derelict LAYER 8 Netgate
            last edited by

            I'm going to have to step back and let you decide what ports you want open from where to where.  When you figure that out, I'll be happy to help you get pfSense doing the right thing.

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • R
              robina80
              last edited by

              thank you Derelict,

              i do want to make my SMTP send connector port 587 as virgin media block outbound port 25

              1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate
                last edited by

                Then do that.  It should require no configuration in pfSense.  I can't help you with configuring exchange.  exim/sendmail/postfix maybe, but not exchange.  good luck.

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                1 Reply Last reply Reply Quote 0
                • R
                  robina80
                  last edited by

                  thank you, you have been very helpful

                  rob

                  1 Reply Last reply Reply Quote 0
                  • F
                    FlashPan
                    last edited by

                    @robina80:

                    as virgin media block outbound port 25

                    Hi,

                    Sorry for maybe putting the cat amongst the pigeons but I am on virginmedia cable and they do not block port 25, I have my test exchange 2010 box running fine with minimal configuration and on port 25

                    1 Reply Last reply Reply Quote 0
                    • R
                      robina80
                      last edited by

                      mmm…

                      reason why i am asking if 25 is blocked if i run a telnet command from the internet i cant connect to my mail server using 25 but i can when i change it to 587, it says 220 my mail server is ready

                      obviously  i port forward the correct ports 25/587 to my exchange server at the time im testing the above command

                      as every time i make my send connector 25 i cant send but i can receive, guess i will try with exchange 2010

                      1 Reply Last reply Reply Quote 0
                      • DerelictD
                        Derelict LAYER 8 Netgate
                        last edited by

                        @robina80:

                        mmm…

                        reason why i am asking if 25 is blocked if i run a telnet command from the internet i cant connect to my mail server using 25 but i can when i change it to 587, it says 220 my mail server is ready

                        obviously  i port forward the correct ports 25/587 to my exchange server at the time im testing the above command

                        as every time i make my send connector 25 i cant send but i can receive, guess i will try with exchange 2010

                        But what you're saying is contradictory.  If you change to port 25 and "can receive" that means other mail servers can make the connection to you on 25.  Which is the opposite of your telnet test experience.

                        Chattanooga, Tennessee, USA
                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                        1 Reply Last reply Reply Quote 0
                        • R
                          robina80
                          last edited by

                          Hi all

                          Good news its working, i will quickly describe what i did

                          I found out one of the services "MS EXCH Mailbox Transport Submission" wasnt running when i listed in order of automatic services

                          I made my send connector back in using port 25 instead of 587 as mails would not send

                          Once i did that my messages went one by one to my sent items in OWA and i had about 23 emails in my gmail inbox

                          Also i did this -

                          http://exchangekb.com/2014/03/19/exchange-2013-emails-stuck-in-drafts

                          I added for internal dns my domain controller ip and in external dns my isp's dns and google's dns

                          http://exchangemaster.wordpress.com/2014/06/10/mails-stuck-in-the-draft-folder

                          http://technet.microsoft.com/en-us/library/cc816856(v=ws.10).aspx

                          I added my isp's dns and google's dns

                          Really grateful for everones input so much appreciated all pointed me in the right direction and so glad got it sorted, only taken me a week!!!

                          Rob

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.