How to configure which server does outbound smtp?

[sab4you]

Currently we have 2 Exchange 2003 servers, a front end and back end. We support POP, IMAP, MAPI and rpc over http.

When users logon externally and use POP/IMAP and send an email, it leaves our back end server.

When users logon internally using Oulook, mail is sent out from our BE server.

Is there a method to make it so all mail leaves a single exchange server, or at least appear this way?

 

[xmsre]

Put the SMTP connector on the front end and designate it a bridgehead.

 

[sab4you]

Well we must have configured something wrong.

We already have the SMTP connector on the FE, as its already our inbound mail.

When we put just the FE connector on the bridgehead list, then all the mail leaving our BE piles up in the queue. For some reason its not transferring over to the FE to send out. I thought the MTA would take care of this?

Any ideas what we may have done wrong?

 

[xmsre]

Mount the priv

 

[zaccaz]

Hi xmsre,

I do have similar issue here, can you help me on this?

Exchange2003SP1 std running on W2K3 servers(without sp1) with FE & BE.

It used to be fine, however since a couple of days ago found outgoing internet emails queued & can't be sent, while incoming internet emails were OK.

Then found at BE's ESM, it said FE's private store is down (I don't have public store in FE).

In BE's ESM when I click FE's Queues, ESM prompted me Access denied error "Facility: Win32 ID no: 80070005".

In BE's ESM when I trick to mount FE's private store, ESM promted me error "You do not have the permission required to complete the operation on the information store. ID no: c1041723"

However in FE's ESM I can mount its private store without problem, I can check its queues without problem.

For DSAccess details, they are different as follows:
exchange be: exchange fe:
AD1 config(auto) AD1 config(auto)
AD1 dc(auto) AD1 dc(auto)
AD1 gc AD2 dc(auto)
AD2 gc AD1 gc(auto)
AD2 gc(auto)

In which AD1 is my ad server on w2k3, AD2 is my ad server on w2k (i only have 2 ad servers in total)

It just happened all in a sudden, there should be no software changes recently.

Finally I rebooted both servers, still have problem.

Now temporary fixed by setting BE to directly send outgoing internet emails, & FE to receive incoming internet emails. However I want to fix the problem & set it up as before, only FE send/receive incoming/outgoing internet emails.

Wondering what's wrong & how to fix it?

Thanks in advance for your help!

 

[xmsre]

80070005 is "access dedied" I've seen this before when you are requiring SSL on the FE server. ESM uses http not https to communicate.

Mounting the store when an SMTP connector exists on a FE

http://support.microsoft.com/default.aspx?scid=kb;en-us;822443

 

[sab4you]

Sorry, but we are using POP and IMAP, so it was my understanding we needed the store mounted for this - so its already been mounted

Our FE has 2 SMTP connectors, one is SSL for our POP/IMAP users when they send SMTP, and the other is for inbound SMTP from our spam machine, but also our desired outbound smtp connection.

We currently have the non SSL SMTP connector on the FE, and the SMTP connector on the BE as bridgehead servers. But, when we take off the BE connector, they all queue up on the BE.

 

[xmsre]

http://support.microsoft.com/default.aspx?scid=kb;en-us;319426

 

[zaccaz]

Hi xmsre,

Yes, I did mount the private store at FE server via FE's ESM, no problem from there. From FE's ESM, everything on FE looks normal, FE's ESM can access BE's queue/store settings as well.

It was just the BE's ESM can't access 2 settings of FE,
1. queue (give me 80070005 error)
2. store (give me the c1041723 error)

For my FE server, I do have SSL since it host owa2003.

Many thanks!

 

[xmsre]

After you installed your certificate, you right clicked the default virtual server and on the directory security tab you checked the box to require ssl. This means you're requiring SSL for all connections to any virtual directory on the FE including connections to exadmin. ESM uses http, not https, when you connect to a remote server to manage it. The FE is basicly returning "access denied" because of this. The workaround is to manage the FE from the FE (what you are currently doing) or don't require ssl on the exadmin virtual directory (right click the exadmin virtual directory, directory security tab, and clear the require ssl checkbox).

 

[zaccaz]

Hi xmsre,

I followed your suggestion to turn off ssl checkbox at FE's exadmin, then stop IIS & restart IIS, however from BE's ESM, still can't access 2 settings of FE,
1. queue (still give me 80070005 error)
2. store (still give me the c1041723 error)

Wondering if any further things to fix/check?

Many thanks in advance!

 

[xmsre]

90070005 means access denied as does C1041723. If it's not the protocol that's causing this error, then you need to recheck your credentials. A network trace would be helpful.

 

[zaccaz]

Hi xmsre,

Thx for further comments.

From BE, I can telnet to FE's port 25, I can ping FE, I can RDC to FE, I can connect to OWA on FE......

What else should I check? Many thanks!