This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM and Exchange 2013

I have setup Exchange 2013 and configure Sophos to be the smarthost via the basic setup however when i check the spooler in Mail Manager I find that none of the messages leave sophos.

I have included my ISP (Comcast) in the upstream provider as well.

Internal email works correctly.

What am i missing? Here is my current config:

Exchange:
-Send Connector: Smart Host = IP of UTM

Sophos:
-Global
--SMTP Proxy: Enabled
--Configuration Mode: Simple
-Routing:
--Domains: External Domain
--Host List: Internal Mail Server
--Verify Recipients: With Callout
-Antivirus:
--Scan during SMTP Transaction: Reject Malware (Checked)
--Antivirus Scanning: Quarantine with Dual Scan
-Antispam
--Reject at SMTP Time: Confirmed Spam
--RBLs: Use Recommended RBLs (Checked)
--Spam filter: Quarantine
--Advanced Spam Features: All checked
-Exceptions:
--None
-Relaying:
--Upstream hosts/networks: ISP SMTP Server
--Authenticated relay: None
--Host-based Relay: Internal Mail Server
--Host/Network Blacklist: None
--Content scan for relayed (outgoing) messages: Scan (Checked)

This thread was automatically locked due to age.

0 Hallowach2 over 11 years ago

Hi,

looks basically ok. What version of utm? Did you check the smtp log or post some (anonymized) log lines.
Does Comcast allow sending on port 25?

Regards
Manfred
Cancel
Vote Up 0 Vote Down

Cancel
0 NW-Loki over 11 years ago

I am using the newest release of UTM. SMTP Log doesn't show anything and the test messages are still sitting in the spooler as unable to delivery.

Comcast doesn't openly allow on 25 (residential) but if you pass the traffic through their servers it works fine.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 11 years ago

Comcast doesn't openly allow on 25 (residential) but if you pass the traffic through their servers it works fine.

So, you have configured the use of their smarthost on the 'Advanced' tab.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 NW-Loki over 11 years ago

Yes. The upstream server is the SMTP address for Comcast.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ol Deda over 11 years ago

If you click on the mail in the spool, what it says?
Cancel
Vote Up 0 Vote Down

Cancel
0 NW-Loki over 11 years ago

Spool says waiting and when I click to view the message headers This is the first line:

2013-06-29 12:52:50 f438568@rmqkr.net R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host

I used 10minutemail as a test destination.
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 11 years ago in reply to NW-Loki

Yes. The upstream server is the SMTP address for Comcast.

Hi, please post a screenshot of the smarthost settings.

BTW, the UTM doesn't support some SMTP ports; 25 and 587 do work.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 NW-Loki over 11 years ago

I went through my settings again and found that I did not change the port when I set the smarthost in Sophos.

I changed the port to what comcast uses (587) and the spool immediately cleared but gave me bounce backs about authentication being required which i have never needed in the past.
Cancel
Vote Up 0 Vote Down

Cancel
0 NW-Loki over 11 years ago

using 587 with my comcast credentials now lets email through.........seems comcast has blocked both in and out on 25 permanently.
Cancel
Vote Up 0 Vote Down

Cancel
0 NW-Loki over 11 years ago

On further testing it seems outbound is working but I am not getting anything when sending to myself.
Cancel
Vote Up 0 Vote Down

Cancel