• RSS
  • Twitter
  • FaceBook

Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Routing incoming mail to Exchange help

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2003] >> Installation >> Routing incoming mail to Exchange help Page: [1]
Login
Message << Older Topic   Newer Topic >>
Routing incoming mail to Exchange help - 20.Apr.2006 5:03:24 PM   
acadnut

 

Posts: 23
Joined: 28.Mar.2006
Status: offline
This forum has been great help. Thanks for being here ...

It appears that I have a new Exchange 2003 installed and configured properly in my domain.

The problem is getting mail in. I can send without a problem. The mail records are set properly at the host, I think. (kbsbuilds.com if you care to look)

I have a Cisco 1841 serving up a dedicated T1. The firewall is connected to eth0/0.

I use 192.168.2.* addresses internally. Everything is kosher there.

I have my Exchange server connected with two ethernet interfaces. #1 is at 192.168.2.6

#2 is on 192.168.20.7 ... the 1841 is supposed to be NATing from my external address to 192.168.20.20 (eth0/1)

I can ping my external address without issue.

Hope a guru can give me some guidance, please.

< Message edited by acadnut -- 20.Apr.2006 5:13:15 PM >
Post #: 1
RE: Routing incoming mail to Exchange help - 20.Apr.2006 8:44:38 PM   
acadnut

 

Posts: 23
Joined: 28.Mar.2006
Status: offline
Update ...

When the #1 interface is disabled, I can resolve a telnet request from outside my network, but that removes the Exchange server from the company network.

Please help !

(in reply to acadnut)
Post #: 2
RE: Routing incoming mail to Exchange help - 20.Apr.2006 11:19:23 PM   
uemurad

 

Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
What subnet masks are you using for 192.168.2.x and 192.168.20.x?
From the Cisco 1841, can you ping 192.168.20.7?
From the Cisco 1841, can you telnet to 192.168.20.7?
On Exchange NIC#2, what do you list as your default gateway?
What is your subnet mask for your external address?

_____________________________

Regards,

Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com

(in reply to acadnut)
Post #: 3
RE: Routing incoming mail to Exchange help - 20.Apr.2006 11:33:27 PM   
acadnut

 

Posts: 23
Joined: 28.Mar.2006
Status: offline
quote:

ORIGINAL: uemurad

What subnet masks are you using for 192.168.2.x and 192.168.20.x?
From the Cisco 1841, can you ping 192.168.20.7?
From the Cisco 1841, can you telnet to 192.168.20.7?
On Exchange NIC#2, what do you list as your default gateway?
What is your subnet mask for your external address?


Thanks, Dean.

I decided to scrap the two ethernet. It was getting out of hand.

So, it's still not working, though. I have a static route defined in the 1841 from the external IP to my internal IP (192.168.2.6) It responds internally, but not when I remote desktop to another corporate location.

I've set my firewall to forward telnet and SMTP.

What am I missing ? 

(in reply to uemurad)
Post #: 4
RE: Routing incoming mail to Exchange help - 21.Apr.2006 8:59:49 PM   
uemurad

 

Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
I'm trying to sort out what your network topology looks like through your router.
Are you saying you are now only using NIC#1 (192.168.2.6)?

Can you also allow ICMP through your router so that you test pinging the server?

You lost me on the Remote Desktop statement.  From what address are you launching the RemoteDesktop Client, and to what address are you trying to connect?


_____________________________

Regards,

Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com

(in reply to acadnut)
Post #: 5
RE: Routing incoming mail to Exchange help - 25.Apr.2006 4:45:07 PM   
acadnut

 

Posts: 23
Joined: 28.Mar.2006
Status: offline
Can we just start over ?

Here's what I have:

MS Exchange on a brand new server. Never had Exchange before.

Cisco 1841 for the T1 connection. Two ethernet ports, one connected to a ...

Watchguard Firebox SOHO 6tc which is connected to the network switch.

The SOHO maintains a VPN connection with a second office, 75 miles away, on the same domain.

I think I overcomplicated my install ^^ up there.

What should I do ? It's impossible to get help from either Cisco or Watchguard as they put blinders on to each other.

Thanks.

(in reply to uemurad)
Post #: 6
RE: Routing incoming mail to Exchange help - 25.Apr.2006 5:18:17 PM   
uemurad

 

Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
First step is to check network connectivity (physical and logical)

I'm assuming:
192.168.2.6 is your Exchange server address
Your local network is 192.168.2.1 / 24 (24-bit subnet mask)
Your Exchange server is connected directly to the network switch you mentioned (no other devices in between)

I'd like to know:
1. What device "owns" the external MX address
   1a. Are you multi-homing the Exchange server NIC?
   1b. Are you NAT'ing the address on the Cisco router?
   1c. Are you NAT'ing the address on the Watchguard SOHO?
2. What is your network address range for your second office?
3. Can you ping 192.168.2.6 from your second office?
4. Are you using workstations on the same network switch to watch for messages, or from office#2?


_____________________________

Regards,

Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com

(in reply to acadnut)
Post #: 7
RE: Routing incoming mail to Exchange help - 25.Apr.2006 5:31:58 PM   
acadnut

 

Posts: 23
Joined: 28.Mar.2006
Status: offline
quote:


First step is to check network connectivity (physical and logical)

I'm assuming:
192.168.2.6 is your Exchange server address

Correct.
quote:


Your local network is 192.168.2.1 / 24 (24-bit subnet mask)

Correct.
quote:


Your Exchange server is connected directly to the network switch you mentioned (no other devices in between)


Correct. There is a firewall after the switch.
quote:


I'd like to know:
1. What device "owns" the external MX address

None right now. Cisco tells me that I cannot assign it to the second port on their 1841. That's what started this whole mess.
quote:


  1a. Are you multi-homing the Exchange server NIC?

It is now. I used the wizard. I'm certainly not "married" to doing that, though.
quote:


  1b. Are you NAT'ing the address on the Cisco router?

Yes.
quote:


  1c. Are you NAT'ing the address on the Watchguard SOHO?

I don't believe that it NAT's ... it allows port forwarding, though.
quote:


2. What is your network address range for your second office?

192.168.0.1 /24
quote:


3. Can you ping 192.168.2.6 from your second office?

Yes.
quote:


4. Are you using workstations on the same network switch to watch for messages, or from office#2?


Right now, just one machine is configured to look for messages and it's on the .2.x network

Thanks so much ... Cisco and Watchguard are frustrating me ...

(in reply to uemurad)
Post #: 8
RE: Routing incoming mail to Exchange help - 25.Apr.2006 6:00:47 PM   
uemurad

 

Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
My head is starting to spin scrolling up and down this thread.

So, you were trying to use the second Cisco port to directly connect your Exchange server, putting it outside your VPN tunnel like in a DMZ?

Who makes the firewall between the switch and Exchange server, and how many ports does it have?

Is the Watchguard SOHO a VPN device only, or is it also a firewall with multiple interfaces?

Just to confirm, your inbound traffic flows Internet--> Cisco1841--> WatchguardSOHO--> NetworkSwitch--> Firewall--> ExchangeServer?

_____________________________

Regards,

Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com

(in reply to acadnut)
Post #: 9
RE: Routing incoming mail to Exchange help - 25.Apr.2006 6:07:29 PM   
acadnut

 

Posts: 23
Joined: 28.Mar.2006
Status: offline
quote:

ORIGINAL: uemurad

My head is starting to spin scrolling up and down this thread.

So, you were trying to use the second Cisco port to directly connect your Exchange server, putting it outside your VPN tunnel like in a DMZ?

Who makes the firewall between the switch and Exchange server, and how many ports does it have?

Is the Watchguard SOHO a VPN device only, or is it also a firewall with multiple interfaces?

Just to confirm, your inbound traffic flows Internet--> Cisco1841--> WatchguardSOHO--> NetworkSwitch--> Firewall--> ExchangeServer?


Believe me, Dean, my head is spinning too. :)

Yes, I was trying to use the second Cisco port like a DMZ, outside of everything.

The WatchGuard SOHO *is* the firewall as well as VPN manager.

I'm configured like this:

Internet --> Cisco 1841 --> WatchGuard SOHO/VPN --> Network Switch --> ExchangeServer

(in reply to uemurad)
Post #: 10
RE: Routing incoming mail to Exchange help - 25.Apr.2006 7:52:50 PM   
uemurad

 

Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
Okay - the fog is starting to lift.  Sorry for all the back-and-forth.

I was reading some of the Watchguard documentation.  Which SOHO model are you using?  Have you considered creating your DMZ behind it instead of the Cisco box?  You probably want to avoid putting too many ACL rules on the Cisco, as it will slow your throughput.

_____________________________

Regards,

Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com

(in reply to acadnut)
Post #: 11
RE: Routing incoming mail to Exchange help - 25.Apr.2006 7:57:47 PM   
acadnut

 

Posts: 23
Joined: 28.Mar.2006
Status: offline
quote:

ORIGINAL: uemurad

Okay - the fog is starting to lift.  Sorry for all the back-and-forth.

I was reading some of the Watchguard documentation.  Which SOHO model are you using?  Have you considered creating your DMZ behind it instead of the Cisco box?  You probably want to avoid putting too many ACL rules on the Cisco, as it will slow your throughput.


It's a 6tc. I'd be happy to DMZ behind it.

I agree about the Cisco ... it's only serving up the T1, nothing else.

(in reply to uemurad)
Post #: 12
RE: Routing incoming mail to Exchange help - 25.Apr.2006 11:01:24 PM   
uemurad

 

Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
Any questions then?  Your Exchange server would connect to the Optional port, either directly or connected to a switch.  You'll have to configure your firewall to allow appropriate traffic from the outside to the Optional, and between the Optional and the Inside ports.  You'll need to give the server an address you can have on the Optional port (a separate range than the inside ports).

_____________________________

Regards,

Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com

(in reply to acadnut)
Post #: 13
RE: Routing incoming mail to Exchange help - 25.Apr.2006 11:10:40 PM   
acadnut

 

Posts: 23
Joined: 28.Mar.2006
Status: offline
I'll try it tomorrow ...

I'm at the office that's 75 miles way and I don't have the correct cables connected.

Thanks so much. I'll post if I have an issue.

(in reply to uemurad)
Post #: 14
RE: Routing incoming mail to Exchange help - 1.May2006 6:28:04 PM   
acadnut

 

Posts: 23
Joined: 28.Mar.2006
Status: offline
Dean -

Thanks. It appears to be running correctly now.

Having problems with Public Folders. I get an error with ID: c1030af7

I tried the Microsoft solution. Didn't help ...

Ideas ? Thanks.

(in reply to acadnut)
Post #: 15
RE: Routing incoming mail to Exchange help - 2.May2006 4:26:08 PM   
uemurad

 

Posts: 8232
Joined: 7.Jan.2004
From: California, USA
Status: offline
Glad to hear you got the DMZ set up.

What problem are you having with Public Folders?  How are you generating the error, and what Microsoft Solution did you try?

_____________________________

Regards,

Dean T. Uemura
Microsoft MVP - Exchange (2007-2011)
exchangeguy.blogspot.com
uemurad@yahoo.com

(in reply to acadnut)
Post #: 16
RE: Routing incoming mail to Exchange help - 2.May2006 4:52:56 PM   
acadnut

 

Posts: 23
Joined: 28.Mar.2006
Status: offline
I've solved the problem.

Let me detail for other's benefit.

Here's the Microsoft solution that didn't solve the problem:

http://support.microsoft.com/?kbid=839744

Doing more digging, I discovered that error will appear if Sharepoint and Exchange are running on the same server.

To fix that, here is the answer:

http://support.microsoft.com/default.aspx?scid=kb;en-us;823265&Product=winsps

(in reply to uemurad)
Post #: 17

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2003] >> Installation >> Routing incoming mail to Exchange help Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Follow TechGenix on Twitter