Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 3 replies
  • Subscribers 27 subscribers
  • Views 7059 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

After enabling Email protection in MTA. I am unable to send emails if connected to ouside internet network

Omer AhmedKhan

Hi,

I recently configured email protection in MTA mode for my exchange server. I am using XG v17 MR-2 with the smart host option enabled as my ISP requires it.

I have 2 local subnets, one for laptops/ PC’s (172.16.1.0/24) connected to port1 and the other for cellphone users (192.168.6.9/24) connected to port3.

Previously my Exchange server (2010) had to NIC’s. One was connected to local network with ip 172.16.1.10 and the other nic was connected to live ip on which smtp traffic comes.

My send connector has the smart host ip of the  isp and my receive connector can receive emails from any ip address.

When i configured on xg, i disabled my live ip from exchange and added that ip in one of my WAN Alias in port2. I then configured xg in MTA mode. And email flow is working fine on the pc’s in my 172 network.

As for my celphones one the 192 network, they can only receive emails and cannot send them. It just stays in the outbox of the cell phone. I noted that my exchange server didnt have any default gateway on its local NIC so i added my xg ip as gateway and also made a business rule with SMTP template where i set my source zone as Mobile (port3) and destination network as the wan alias port and forward all ports to the local exchange server in LAN zone then i am able to also send email from cell phone while it is connected to my local port3 network.

Now the problem is that if i connect to any other public wifi and then try to send my emails, They fail. I basically cannot send emails from my domain email account while i am connected to any public isp outside my office network.

The emails not come to xg. They stay in the outbox of the laptop or the cellphone. But email reception is fine.



This thread was automatically locked due to age.
Parents
  • 0

    Hi Omer,

    which protocol does your mobile device use to sync its mail?

     

    if you use active sync you'll Need to publish it.

    - either use WAF to Publish path "/Microsoft-Server-Active-Sync" maybe with reverse authentication

    - or use DNAT to publish the whole HTTPS part of the Exchange IIS Server.

     

    (Options in preferred order - availability depending on licensed features)

     

    Yours Lukas

  • 0 in reply to lna

    Hi Lukas,

    Mobile devices use POP3 to sync emails.

    I have not created a WAF rule as its not a requirement.

    There are two rules present;

    a) the auto-added rule

    b)A DNAT rule that is forwarding port all ports just for testing and later i will restrict them to just ports 25,587,110,143 and 465

  • +1 in reply to Omer AhmedKhan

    Hi,

    I also had a Support Case locked. The problem was that MTA mode is for SMTP, whereas in my case i had POP3 users also. so i had to create a mix of both MTA for the SMTP and a DNAT rule (with scanning) for the POP3 in which i allowed only port 110 and 587 as according to the logs all mobile users were using these ports.

    The issue now stands resolved.

    Thanks Lukas for your support.

     

    Regards,

    Omer Ahmed Khan

    Sophos Certified Engineer

Reply
  • +1 in reply to Omer AhmedKhan

    Hi,

    I also had a Support Case locked. The problem was that MTA mode is for SMTP, whereas in my case i had POP3 users also. so i had to create a mix of both MTA for the SMTP and a DNAT rule (with scanning) for the POP3 in which i allowed only port 110 and 587 as according to the logs all mobile users were using these ports.

    The issue now stands resolved.

    Thanks Lukas for your support.

     

    Regards,

    Omer Ahmed Khan

    Sophos Certified Engineer

Children
No Data