Exchange 2003 as mail router

[nikko6]

Hi all,
Our iSeries server is configured to route email to an exchange 2003 box, according to IBM tech support. They said they I have to allow relaying on the exchange box. I'm getting "relaying blocked at this site" error message when I try to send an email from the iSeries. How do I configure Exchange to allow relaying from the iSeries and/or do i have to configure an smtp connection to email out to the internet?


Thanks in advance

 

[WhoKilledKenny]

Ok... what software are you using on the iseries to route mail? IIS6?
If you are using SMTP on IIS6 as a gateway then do the following:
1. Open IIS manager - Default SMTP Virtual Server

2. Click on Domains, is there a icon for your domain? If so right-click on it and choose properties.

3. Under the General Tab, there should be a choice to "Allow incoming mail to be relayed to this domain." Make sure it is enabled.

4. I like to us the "Forward all mail to smart host" option under Route domain. Why? So that I do not have to allow internal DNS queries from the DMZ, where my SMTP gateway is located. So in the Smart host cofiguration you would enter the IP address of your Exchange server, and yes enter it with the brackets. Example, [192.168.0.25]

5. If SMTP gateway is in your DMZ (Recommended), make sure the proper ports are open between the SMPT Gateway and your Exchange server.

Hope this is what you were looking for...

 

[WhoKilledKenny]

Also, On the exchange server(s). I have Relay set up to allow all computers which successfully authenticate to relay. This is config is found under Exhcnage Org -> Admin Groups -> Servers -> Server -> Protocols -> SMTP - Default SMTP Virtual Server.

Under Routing Groups -> your org -> Connectors -> SMTP Connector properties, General Tab. I have "Forward all mail through this connector to the following smart host." This config has the IP, again in brackets, of my gateway. Example [24.134.76.90]. And I have each on of my Exchange servers configured as local bridgeheads for this connector.

 

[nikko6]

Thanks for your input, iSeries is not using IIS it's using its own SMTP engine.I am not a iSeries pro so I have to assume that my iSeries admin and IBM tech support has it configured correctly. I did configure the smtp connector like you mentioned in the exception that i didn't put the ip address of my gateway in the "Foward all mail through this connector to the following smart host". I put the ip address of the iSeries. Are you saying that I should be putting the ip address of my smtp gateway which would be my spam filter appliance?

 

[WhoKilledKenny]

I'm not familiar with you environment enough to understand your mail flow. I was giving you an example of how mail routes through my org. I route incoming email through a gateway - IIS - (which is also a spam filter) to Exchange. Outgoing email routes via the smtp connector in Exchange back to the gateway and out...

 

[nikko6]

i also route mail through mail in and out through a gateway which would be the spam appliance not IIS. So i guess i would have to put the ip address of the spam appliance as the smart host.

 

[WhoKilledKenny]

Let me make sure that I am clear... mail comes in via a spam appliance then to Exhange? OR - mail comes in via iSeries Server then routes to Spam Appliance then to Exchange? I've gotten thrown for a loop when you introduced the Spam App, so bear with me...
Usually I don't send outgoing mail through a spam filter, just incoming mail. So I would send my outgoing mail to my email gateway in the DMZ (Whether it running Spam Filter or not).
You said you SPAM Applicance is your gateway not running IIS. If that is the case what function does the iSeries Server accomplish in your environment?

 

[nikko6]

sorry for the confusion, we just migrated over to exchange from the iseries for email and yes mail comes in via spam appliance then to exchange, but not out through spam filter. i would like to route any email from iseries to exchange then out to internet Again sorry for the confusion

 

[WhoKilledKenny]

I think I got it... Your iSeries Server is your gateway that is also running your SPAM Filter software, so it is one box.
In this case, yes, try configuring your SMTP Connector in Exchange to forward mail through the smart host. Configure the Smart host setting with the IP address of the iSeries Server and don't forget the brackets... [192.186.0.24]

I should have asked this question a few posts ago...
You said "I'm getting "relaying blocked at this site" error message when I try to send an email from the iSeries."

Where are you getting this error message? While logged on to the iSeries Server? or are you getting an NDR message when sending mail from Outlook, while logged on your workstation?

 

[WhoKilledKenny]

Ok scratch my last comment... be back soon.

 

[nikko6]

i would like to add that the iseries will have only the smtp protocol enabled, no email from the internet will be going there. The Iseries generates files that users need to read via email whether it be pdf files or any other file it generates. i just need the iseries to email those files to the users mailbox to exchange and/or into the internet through exchange

 

[WhoKilledKenny]

OK... so during your migration, which you may still be envolved. It sounds like you have mail comming from two places, from the iSeries Server and from your Spam Appliance. On both of these gateways you should configure them to route incoming mail to your Exchange server. As far as out going mail you can choose to send all outgoing mail (From Exchange) to the Internet, using a smart host. It's either the IP of the iSeries or the Spam Applicance, your choice.

You could also route mail out of either gateway using differnet SMTP Connectors in Exchange, but this takes more planning as it can get a little complicated.

Try setting up your smart host on your SMTP Conector to route mail via your gateway to the Internet.

 

[nikko6]

thank you so much i will try it tomorrow and will let you know. You've been very helpful. Thanks

 

[WhoKilledKenny]

OK, I am sorry and got totally confused by the function of the iseries server, I read to deeply into it, Scratch everything. You just want to allow your Exchange environment to accept email from the iSeries box (which is not a windows box).
The way you do this depends on if your iSeries server is internal or external(DMZ) to your network.
If internal - go to your Exhange System Manager -> Admin Groups -> Server -> Server -> Protocols -> SMTP -> Default SMTP Virutal Server properties. Access tab -> Relay button. If it is set up to "Allow all computers which successfully authenticate to realy...." Then your iSeries server should be able to realy mail to your users mailboxes. I should say as long as nothing is blocking port 25.

If the iSeries server is external to your network. I would set up your email gateway (The Spam Appliance) to accept email from the Iseries box and relay it into your exhcnage environment. Since your gateway is not IIS, I would not be able to assists with that configuration. Again in both cases make sure you verify with your Network team that port 25 is not being blocked.

Hope that helped...

 

[nikko6]

that was exactly the way i configured exchange(internal), but it wasn't working. IBM tech support kept on insisting it was exchange not allowing the relaying, based in what they see in the iseries smtp logs. i will keep testing will keep you posted.

Thanks again