Have you contact your ISP maybe they block port 25 for you. Or set you mailserver to send your mail to ASL box called mailgateway in linux. If your ISP blocked port 25 for you. You must asked them for a host you can send your mail. In ASL box it called smarthost under smtp proxy.
My isp does not block if I hook up to my linksys router and remove astaro everything works fine. Although something I thought was strange. I don't have a static ip but I do have a public domain name. I use dynamic dns through www.zonedit.com. I run a dynamic dns client on one of my systems. I noticed that the wan ip that my dynamic dns client gets is different than the one that the astaro box wan interface gets. For example, my ip use to change thus the need for dynamic dns client, but now the ip that the wan interface of the astaro box will stay the same. It only changes if I have to reboot the astaro system.
You might have already did this, but just in case..... In ASL only allow the Exchange server to send outbound mail through the outbound SMTP proxy rule No 'packet filter' rules should exist allowing outbound SMTP, the proxy is handling this In Exchange, I always set the smarthost setting to point to the ASL so it forces it to go through the ASL.
basically it seems that the reasom the mail is not going out is because I have to tell exchange to send the mail to the astaro proxy. It also talks about resoving dns for exchange through the use of smarthost or simply allowing the exchange server to perform dns queries.
amp10000, Don't get confused with all the ISA stuff. Basically, we know your public DNS(MX record) is configured correctly because you are receiving mail. The problem is Exchange is not sending mail from the inside of your network. If you go into Exchange System Manager, go into SMTP virtual server properties, outbound, advanced (don't have one in front of me, somewhere around there?), then you can put in the name of the ASL box...assuming that your internal MS DNS will resolve the name of the ASL to the private address of it. Once that is in place, I would restart the Exchange SMTP service (it is M$, afterall) and then give it a try.
amp10000, Don't get confused with all the ISA stuff. Basically, we know your public DNS(MX record) is configured correctly because you are receiving mail. The problem is Exchange is not sending mail from the inside of your network. If you go into Exchange System Manager, go into SMTP virtual server properties, outbound, advanced (don't have one in front of me, somewhere around there?), then you can put in the name of the ASL box...assuming that your internal MS DNS will resolve the name of the ASL to the private address of it. Once that is in place, I would restart the Exchange SMTP service (it is M$, afterall) and then give it a try.
Thanks that took care of my proble, but I would like to ask you about 2 other things. First of all I would like to ask which do you prefer isa server or astaro. I noticed that you have a mcse so I assume you've used isa 2000. Also I would like to ask you about this info I pulled from the help file
"If you want to use an upstream smarthost to send mail, you can activate the function and enter the hostname or IP address of the smarthost. In that case, the proxy will never deliver mail himself, but rather send anything to the smarthost that is not for domains listed in Incoming Mail. If the smarthost requires SMTP authentication, you can enter a username and password in the respective fields. Both PLAIN and LOGIN auth types are supported."
Is this basically telling me that my outgoing emails will bypass the smtp proxy thus having it only scan incoming emails. Also is exchange servers definition if a smart host the same as what my isp calls a smart host. My isp defines a smart host as being a server that collects outgoing mail and sends it to antoher server. By the way thanks for everyones help.
amp10000, Glad I could help! As far as which I prefer, ISA or ASL (do not want to start a flame war), definitely ASL!! I do not consider ISA as a security solution for any client for many reasons but the biggest, in my opinion, is that the words Microsoft and Security do not belong in the same sentence (again, my opinion, please no flame war).
As far as the ASL smarthost that you are referring to, this simply means that any mail that your domain sends to another domain will be sent to directly to the server listed here. A practical example of why you would use this is that you have a mail server on a residential broadband service....when your mail is sent to a domain (aol.com, for example) aol's mail server see's that the originating IP is from a residential IP and it blocks the mail. You can set ASL to send all mail to your ISP's mailserver which will then relay the message. AOL will then accept the message because it does not come from a residential IP anymore, it is now coming from the IP of the ISP's mailserver. I am having to do this at my house.
Your mails are not 'bypassing' the ASL's proxy because it is still traversing the ASL.
The definition of smarthost is pretty much the same when it comes to mail severs.
