Ironport C170 Relay outgoing Email to External Server

We have a new Ironport C170 and am only using the appliance for Encryption/DLP. We wish to have incoming and outgoing Email to flow through this appliance. All incoming Email will be relayed to our Exchange Server and all outgoing Email will be relayed to our SAAS Email Filtering System for processing and delivery. The incoming part I believe is configured correctly but am having issues figuring out how to relay all outgoing to a specific domain in the cloud.
Any assistance would be greatly welcomed,
Stephen

Hi Stephen,
You can control all the outgoing mail from SMTP Route configuration, if is in GUI menu > Netowork > SMTP Route.
You can define the route to next hop based on destination domain, as for default - all other domains (this is the one that goes to SaaS) you can enter your cloud SMTP address and the port number there.
Hope this helps.
Thanks,
Donny

Similar Messages

HOW TO: Relay/Send email from websites, Server Monitor in OS 10.5 Server

If you don't want to run your own mail server or configure DNS on your Xserve, but you still want your website or applications like Server Monitor to send email notifications; this is what you need to do:
Scenario: Mac OS 10.5.2 Leopard - Advanced Configuration - Setup is for strictly sending emails through SMTP, routed through your ISP or another provider. This is not for receiving emails.
-Open up Server Admin
If you have yet to add in a server to admin, you need to do so. Resource PDFs on setting up OS X Server are available at Apple http://www.apple.com/server/macosx/resources/ and there are video tutorials at http://movielibrary.lynda.com/html/modPage.asp?ID=373
-Click on your server, then choose the Settings button
-Then choose Services from the Tabs/Buttons below
-Select the Mail checkbox and then hit Save
-Now choose the newly added Mail service in the left pane, then click the Settings button up top
-Start with the Advanced tab. Under Security, un-check everything and don't use SSL unless you want to. You don't need to mess with the other sub-tabs here.
-Next choose the Logging Tab. Under SMTP log level, choose debug so you will be able to see what goes on in the log.
-Mailing List, Quotas and Filters tabs can go untouched. You can mess with them later if you want.
-Click the Relay tab. It is a good idea to only accept relays from your local machine. If you uncheck this, I believe it leaves you with an open relay that anybody can access.
-Now for the General Tab. Under Domain Name put anything you want. Any made up name and extension is fine.
Under Host Name, again put anything you want.
Un-check Enable POP, Un-check Enable IMAP - Basically un-check everything
Check or leave checked Enable SMTP
Now check Relay outgoing mail through host:
Then enter your hosts SMTP server. ex. smtpout.secureserver.net
Now check Authenticate to relay with user name: and enter your username and password
-Now hit the Save button
-Now we need to take a look at the main.cf file and add a few things
-If you aren't showing all files in Finder already, open up Terminal.app
Now type in: defaults write com.apple.Finder AppleShowAllFiles True
Hit enter
Now type in: killall Finder
Now Finder should reset and all files should be visible - To hide all files, do the same thing but type False
-Now open Macintosh HD and navigate to /private/etc/postfix/main.cf (Note: you won't be able to open and edit this in TextEdit. I recommend a program like TextWrangler http://www.barebones.com/products/textwrangler/download.shtml )
-Once you have main.cf open, all your settings should be together at the bottom of the doc. Scroll down. You will need to add in a few lines and verify all the settings are exactly as below (except of course your own names and SMTP server):
readme_directory = /usr/share/doc/postfix
mydomain_fallback = anything.anyting
messagesizelimit = 0
myhostname = anything.anything
mailbox_transport = cyrus
mydomain = anything.anything
mailboxsizelimit = 0
enableserveroptions = yes
inet_interfaces = all
relayhost = smtpout.secureserver.net
smtpsasl_passwordmaps = hash:/etc/postfix/sasl/passwd
smtpsasl_authenable = yes
smtpdsasl_authenable = no
smtpsasl_securityoptions =
smtpduse_pwserver = no
smtpdrecipientrestrictions = permitmynetworks,reject_unauthdestination,permit
smtpdpw_server_securityoptions = none
-Now save the main.cf document
-Now go back to Macintosh HD and navigate to /private/etc/postfix/sasl/passwd
Open passwd with TextWrangler or you editing app, and verify that your SMTP server, username and password are correct. It should look something like this:
smtpout.secureserver.net [email protected]:password
-This should be what you entered in Server Admin when you first started. If all is well, quit your editing app.
-Now, while you are still at /private/etc/postfix/sasl/passwd you need to edit permissions for passwd
You can chmod in Terminal.app or secondary click on passwd and "Get Info"
Click the lock and enter your password to unlock the settings
Next click the + button and add yourself and Admin
-Now you can close out of everything and go back to Server Admin
-Hit the Reload (twisty arrow) button at the bottom and once everything is reloaded, hit Start Mail
-Now type localhost in your browser to see if your website can send email. You can also open up other apps such as Server Monitor and do something to change the status to have it send an email.
-You can click on Mail in the Server Admin and then view the SMTP log. As long as emails are being sent and then removed from the queue, you are in good shape. If you are getting an SASL error or mechanism error, open up main.cf and verify your settings and/or check permissions on passwd file

Don't you need the Mail service running to have apps like Server Monitor send email notifications? - Also for hosted sites that use the sendmail function you need a service running to get the emails sent.
Really you are not hosting a Mail server. It is open, but there is no incoming and if you only accept SMTP relays from the local machine, there should be no issues.

EMAIL to external server like Yahoo through SAP

Hi all,
I want to send a mail to the vendor when a PO is created through SAP. Please tell me what is the procedure to follow to do it and what all are the setings need to be done in SAP to send Email through SAP to external server like yahoo, rediff etc.
Thanks

*&      Form F_SEND_MAIL
      Send the mail to corresponding user
FORM F_SEND_MAIL.
DATA : LV_TABLE_LINES LIKE SY-TABIX.                   " table index
CLEAR: V_MSG1, IT_RECLIST.
REFRESH IT_RECLIST.
*-popualate email ids
IT_RECLIST-RECEIVER = V_UNAME.
IT_RECLIST-REC_TYPE = 'B'.
IT_RECLIST-SAP_BODY = C_X.
IT_RECLIST-EXPRESS = C_X.
*-append receiver table
APPEND IT_RECLIST.
CLEAR IT_RECLIST.
*-populate document attributes
CLEAR: X_DOC_CHNG.
X_DOC_CHNG-OBJ_NAME = 'Error'(M01).
X_DOC_CHNG-OBJ_DESCR = 'ERROR REPORT'(M02).
*-populate body text
IT_OBJTXT = 'Error file is attached'(M03).
APPEND IT_OBJTXT.
*-document size
CLEAR : LV_TABLE_LINES.
DESCRIBE TABLE IT_OBJTXT LINES LV_TABLE_LINES.
READ TABLE IT_OBJTXT INDEX LV_TABLE_LINES.
X_DOC_CHNG-DOC_SIZE =
               ( LV_TABLE_LINES - 1 ) * 255 + STRLEN( IT_OBJTXT ).
*-populate packing list for body text
CLEAR IT_OBJPACK-TRANSF_BIN.
IT_OBJPACK-HEAD_START = 1.
IT_OBJPACK-HEAD_NUM = 0.
IT_OBJPACK-BODY_START = 1.
IT_OBJPACK-BODY_NUM = LV_TABLE_LINES.
IT_OBJPACK-DOC_TYPE = C_DOCTYP.
APPEND IT_OBJPACK.
CLEAR IT_OBJPACK.
*-populate object header
IT_OBJHEAD = 'INET TO SAP Error Report'(M04).
APPEND IT_OBJHEAD.
CLEAR IT_OBJHEAD.
*--for attachment ---start
*-populate object bin table for attachment
*-column header
LOOP AT IT_MAIL.
    IT_OBJBIN = IT_MAIL.
    APPEND IT_OBJBIN.
    CLEAR IT_OBJBIN.
ENDLOOP.
*-get total no.of lines of Object table(attachment)
CLEAR : LV_TABLE_LINES.
DESCRIBE TABLE IT_OBJBIN LINES LV_TABLE_LINES.
*-populate object header
IT_OBJHEAD = 'Report'(M05).
APPEND IT_OBJHEAD.
CLEAR IT_OBJHEAD.
*-packing list for attachment
IT_OBJPACK-TRANSF_BIN = C_X.
IT_OBJPACK-HEAD_START = 1.
IT_OBJPACK-HEAD_NUM = 1.
IT_OBJPACK-BODY_START = 1.
IT_OBJPACK-BODY_NUM = LV_TABLE_LINES .
IT_OBJPACK-DOC_TYPE = C_DOCTYP .
IT_OBJPACK-OBJ_NAME = 'ABCD'.
IT_OBJPACK-OBJ_DESCR = 'ERROR REPORT'(M02).
IT_OBJPACK-DOC_SIZE = LV_TABLE_LINES * 255.
APPEND IT_OBJPACK.
CLEAR IT_OBJPACK.
*--code for attachment -- end
*-Sending the document
CALL FUNCTION 'SO_NEW_DOCUMENT_ATT_SEND_API1'
       EXPORTING
            DOCUMENT_DATA              = X_DOC_CHNG
           PUT_IN_OUTBOX              = C_X
   IMPORTING
        SENT_TO_ALL                =
        NEW_OBJECT_ID              =
       TABLES
            PACKING_LIST               = IT_OBJPACK
           OBJECT_HEADER              = IT_OBJHEAD
           CONTENTS_BIN               = IT_OBJBIN
           CONTENTS_TXT               = IT_OBJTXT
        CONTENTS_HEX               =
        OBJECT_PARA                =
        OBJECT_PARB                =
            RECEIVERS                  = IT_RECLIST
      EXCEPTIONS
           TOO_MANY_RECEIVERS         = 1
           DOCUMENT_NOT_SENT          = 2
           DOCUMENT_TYPE_NOT_EXIST    = 3
           OPERATION_NO_AUTHORIZATION = 4
           PARAMETER_ERROR            = 5
           X_ERROR                    = 6
           ENQUEUE_ERROR              = 7
           OTHERS                     = 8
IF SY-SUBRC <> 0.
    MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
            WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4 INTO V_MSG1.
    MESSAGE I000 WITH V_MSG1.
ENDIF.
Hope this code will be useful

Ironport C170 - Outbound encrypted emails hang in PXE encryption queue

We had a power outage on site, and since the power has been restored, our encrypted emails have not been sending out. Message tracking on the C170 states ----Message XXXXXX has been enqueued for PXE encryption.------
We eventually get a bounce with the following info.
-------Diagnostic code = NoDiagnostic; Reason code = TransferFailed; Status code = 500
< #5.0.0 smtp; 5.x.3 - Temporary PXE Encryption failure. Please try resending the message. If the problem persists, please contact your administrator. (Encryption operation expired due to key server communication problems or resource constraints.) (delivery attempts: 14)>--------
I've verified communication from the C170 to https://res.cisco.com and I've rebooted the C170, but the problem remains.
Where to go from here?
Thanks!
Aaron

There are 18 in the queue, and it's showing that there have been 126 hard bounces. I have a support case opened this morning (SR 632888329), but I've not heard back since the initial email where they asked me to establish a tunnel. I responded with the requested information. I'm going to reach out again as people are getting antsy.
I've included the info from the hard bounces.
02 Dec 2014 09:10:56 (GMT -05:00) Message 732069 has been enqueued for PXE encryption.
02 Dec 2014 11:13:07 (GMT -05:00) Message 732069 pending PXE encryption until Tue Dec 2 11:28:07 2014 as per encryption profile APS.
02 Dec 2014 11:41:09 (GMT -05:00) Message 732069 pending PXE encryption until Tue Dec 2 11:56:10 2014 as per encryption profile APS.
02 Dec 2014 12:09:12 (GMT -05:00) Message 732069 pending PXE encryption until Tue Dec 2 12:24:12 2014 as per encryption profile APS.
02 Dec 2014 12:35:13 (GMT -05:00) Message 732069 pending PXE encryption until Tue Dec 2 12:50:14 2014 as per encryption profile APS.
02 Dec 2014 13:01:16 (GMT -05:00) Message 732069 pending PXE encryption until Tue Dec 2 13:10:57 2014 as per encryption profile APS.
02 Dec 2014 13:21:17 (GMT -05:00) Message 732069 exceeded maximum queue life time in the encryption queue.
02 Dec 2014 13:21:17 (GMT -05:00) (DCID 0) Message 732069 to [email protected] bounced by destination server. Reason: 5.x.3 - Temporary PXE Encryption failure. Please try resending the message. If the problem persists, please contact your administrator. (Encryption operation expired due to key server communication problems or resource constraints.) ('000', [])

Can I get help with my outgoing email? SMTP server is correct but says is offline.

When I try to send, I get {Connections to the server “smtp-server.gt.rr.com"on the default ports timed out. Select a different outgoing mail server from the list below or click Try Later to leave the message in your Outbox until it can be delivered.”}
This is weird, as my outgoing mail setting is exactly as it should be, I called the service provider and he set them up.
But for some reason, when I edit my server list, it lists my outgoing mail server as being 'offline' in brackets, and I don't have any option to take my accounts 'online' as I thought they were. I have even checked and everything is as it should be.
I have deleted this account, added a new outgoing mail server and I get the same message.
I have deleted my account (but archived my mail boxes) and started from scratch, and entered the correct info as before, but I still get the same message? Please help?!

Hello,
In Mail's Window menu item, choose Connection Doctor, does that report failed for smtp?
Modt likely the port or authentication method if nuser & Password are correct... sometimes the user ID is JohnDoe, other times it needs to be [email protected]

Outgoing email rejected by server

HI I am having issues with my work email on my iPhone 4! The phone is my employers and they have inoutted all the settings and passwords which are not available to me, however this problem is common on all company phones. Basically my personal emails work fine, and my work mail receives ok, however when I send it states "a copy has been placed in your outbox. The sender address [email protected] was rejected by the server. The outgoing server is smtp.gotadsl.co.uk server port 25.
THe strange thing is it worked intermittently today and sent mail, not sure if it's because I was in the office on their wifi but it won't work again now.
Please help, it's driving us all bonkers!!!
PS tried restarts, only 3G etc but ran out of ideas.......

If you know that you have the correct password, you can check this. I have seen it work for others who have gotten the "message was rejected by the server" message. \
Check the outgoing mail server setting. Make sure that your username and password are in there.
Settings>Mail, Contacts, Calendars>Your email account>Account>Outgoing mail server - tap the server name next to SMTP and check in the primary server and make sure your username and password are entered and correct - even if it says that the password is optional.
I had to do this when I restored my new iPad from the backup of my old iPad with an IMAP account that I have.

Outgoing Email on Cox server

I have read through the many posts on this topic and tried lots of things. I can't bear the idea of spending another 1 1/2 on the phone with Apple Support.
I just got a new iPhone sent to me as 1.1.1. killed my old phone. Before downloading 1.1.1. everything was fine.
The new iPhone arrived with 1.0.2 loaded and I am not about to download 1.1.1.
Anyway, before my outgoing mail server had to be cwmx.com (I got that from going through) the posts on this topic. Now that won't work either when sending email. I get the message "The connection to the outgoing server "cwmx.com" failed.
Any advice? Thanks

Set your outgoing mail server to smpt.vzwmail.net. Go to advanced, outgoing server settings and click ESMPT, then under username enter your 10 digit Verizon phone no. then your Verizon Wireless my account password.
Since cox central won't allow users to send outgoing mail on their smpt server, you just simply use Verizon's.
Worked great.
Post relates to: Centro (Verizon)

Proper TLS Config for IronPort C170

I inherited an infrastructure a little bit ago that uses an IronPort C170 cluster for email security. I have been tasked with configuring TLS connections with our new medical benefits provider and have some issues doing so. We have 3 MX records, let's call them mail1, mail2 and mail3. Mail1 and mail2 are configured normally on our firewall to pass SMTP traffic on port 25 to the MailListener port on the IronPort which is 25. Mail3, however, is configured on the firewall to translate SMTP traffic on port 25 to port 3600 which is sent to the TLS Listener port 3600 on the IronPort. The IronPort MailInterfaces are configured as such (25,3600) Reverse configuration on the firewall takes any port 3600 traffic from the IronPort and translates it to port 25 traffic for the rest of the world.
I configured the IronPort with a new Sender Group named TLS_ACCEPT, added all the medical provider domain names/IPs to it and assigned it to the ACCEPTED Mail Flow Policy where TLS is set to Required. Likewise, for outgoing, I specified the same domain names/IPs within the Destination Controls to require TLS for sending purposes.
I replaced the guy who originally configured this so I am not too sure how it is setup on the other end for TLS connections already established. We do have a few in place that are active. I am assuming that the other end is configured to send email only to the mail3 MX record. This configuration, however, is not possible with our medical provider so I need an alternative. They have verified that they cannot contact us on mail1 or mail2 via TLS but can with mail3.
The obvious problem is if a sender from these new domains tries to send TLS_required emails to us over the mail1 and mail2 MX IPs, they will receive an NDR. If I configure the firewall to translate mail1 and mail2 incoming connections from port 25 to 3600, any email sent with TLS not prefered/required will get an NDR. This was actually tested and domains like Yahoo and Hotmail could not send to us.
Are there any options for me on the IronPort to allow these connections to be sent from all our MX IPs without having to translate the ports? If not, what would happen if I changed the TLS Listener port on the IronPort to 25 instead of 3600 and disabled all the NAT rules on the firewall for mail3? I am only to assume this translation was another security step added by the previous admin here but am not too sure what would happen if I eliminated it.
Any advice, help, questions, assistance or fun-poking would be greatly appreciated!! Thank you in advance!

Kevin,
OMG there's so much unneeded complication here...You can totally ditch the port translation
Here's what I did:
Under Network/IP interfaces, I have 3 interfaces: managment, Public, Private.
     Public is exposed to the net, only port 25 allowed in/out, with 1 A record for a Domain1 which I have a certificate for.
Under Network/Listener I have 2 Listeners:
     Outbound on the Private interface not really relavent for the rest of this discussion
     Inbound on the Public interface
          listening on port 25
          using an Accept query pointed at my Active Directory (all the various email domains in 1 AD)
          using a cert that matches the hostname on the Public interface
          Mail flow polices in HAT all set to TLS preferred with an address list configed for the "required" ones
Mail Policies/Destination Controls to force sending as TLS
In my external DNS
     Domain1
          A mail.domain1.com x.x.x.
          mx domain1.com mail.domain1.com pref 10 weight 10 TTL 86400
     Domain2-10
          mx domain2.com mail.domain1.com
          mx domain3.com mail.domain1.com
     etc....
Hope that helps...
Ken

Auto save a copy of outgoing email in SharePoint 2010

Hi,
I need to save a copy of an outgoing email from SharePoint Server 2010. So is there any option in SharePoint to save a copy as audit or do we need to write custom thing for this? Any idea how to achieve this . pls share your thougths if you done
this before or any ideas about solution approach also great help.

One thing to note - there's a limit if you are using SharePoint Designer workflow to send the original email - it cannot email back to another SharePoint email-enabled list. You are 'protected' from yourself.
We had an instance where I needed data to cross site boundaries in a site collection, and I had to do it through workflow. So our 'hack' was to email another Exchange mailbox set up specifically to relay emails. That mailbox had a rule to forward the email
back into SharePoint.
Terribly clumsy but it works. A SharePoint workflow email cc's the Exchange mailbox, which then forwards the email back to an email-enabled discussion list used as an email store.
Robin

Add email disclaimer to all outgoing email

Is there a way to add an email disclaimer to every outgoing email on the server level, not the mail.app signatures?

If you search the forum, you'll likely find my several rants on this subject.
Please do, as I'm not going to repeat the entire thing.
Basically, if you can gurantee that all messages are straight text, you can add a disclaimer, but if not, then it's just not possible.
Messages are far more complex than in years past. Adding a standard footer is something far better done by the mail client, as the client assembles the message. The server's job is to transfer the assembled message. Adding a part to the message would be very cpu intensive, and would require you to disassemble all the parts, create the new part, and reassemble it all.
Of course, this doesn't even begin to address question of, "are disclaimers of any use", either. That answer is typically, "no".

Ironport C170 Blocks Emails Being Sent From SMTP Relay

I have an issue with emails being sent out through our virtual SMTP Relay from a server on the DMZ. Any emails being sent to internal email accounts on our domain works fine. However the ones sent to external accounts are being rejected by the RAT. Here is a shot of the rejection message we are getting:
29 Oct 2013 10:09:58 (GMT -05:00)
Protocol SMTP interface Data 2 (IP xxx.xxx.xxx.xxx) on incoming connection (ICID xxxxxxx) from sender IP xxx.xxx.xxx.xxx. Reverse DNS host internal.domain.org verified yes.
29 Oct 2013 10:09:58 (GMT -05:00)
(ICID xxxxxxx) ACCEPT sender group UNKNOWNLIST match sbrs[-1.0:10.0] SBRS 0.4
29 Oct 2013 10:09:58 (GMT -05:00)
Start message xxxxxx on incoming connection (ICID xxxxxxx).
29 Oct 2013 10:09:58 (GMT -05:00)
Message xxxxxx enqueued on incoming connection (ICID xxxxxxx) from [email protected]
29 Oct 2013 10:09:58 (GMT -05:00)
Message xxxxxx on incoming connection (ICID xxxxxxx) to [email protected] was rejected by Recipient Access Table (RAT).
29 Oct 2013 10:09:58 (GMT -05:00)
Message xxxxxx aborted: Receiving aborted by sender
I am new to the Ironport world so I am having a hard time figuring out how to allow for my SMTP relay to send emails to external email accounts. Thanks for any advice in advance!

It looks like the message should be arriving via SENDERGROUP RELAYLIST instead of
ACCEPT sender group UNKNOWNLIST .
Navigate to GUI --> Mail Policies --> HAT Overview
Then click the RELAYLIST sendergroup
Add the IP address of your sending MTA to this group, submit and commit changes.

Allow External Server on Cloud to Relay Email

Hi Exchange Server Expert,
I have a query to ask. Currently my company has hosted a web server on the cloud with the public IP address. Since it is a web server, we will need to allow it to relay email via the Microsoft IIS to our exchange server. I have tried before for the internal
server with private ip to relay email on the exchange server by creating a receive connector. however, I never try for the remote server with public ip address. we would like the remote server to relay email to both our internal email (accepted domain in exchange
server) and also external recipients with the external domain.
How am I suppose to perform this task?
Thanks for your attention.
Best Regards,
Henry

Hi Oliver,
thanks again for your prompt response.
I can't login to the web server as it is managed by vendor that configure the web server and we are only being allowed to access the web server via the public URL. basically, i don't know what is the configuration behind. I was being told that they will
configure the email inside the IIS, which i also don't know how to configure.
I have tried to configure the relay connector inside the exchange before following the same guide by changing the private IP to the web server public ip. i also allowed the permission group to exchange servers and authentication on "externally secured".
however after i inform the vendor to test it, it didn't work at all.
i am not able to test using telnet like what i did when doing relay for my internal server. I can't use telnet to test my web server to check whats wrong with the relay. i would like to test like what the guide do, but it is not allowed me to telnet.
what should i do to troubleshoot? i think that allowing relay of external server is a security breach which is very risky. am i right?
thanks
Regards,
Henry
Hi Henry,
Speak to the vendor that manages the web server for IIS setup and ask 'can I use authentication?' If they come back with a 'yes you can' simply provide them with a user/pass so they can authenticate.
Personally I wouldn't allow a public IP to relay by configuring an Exchange Organisation to allow anonymous relay for a public IP, and would ask that they authenticate.
If they come back with a no - then we can troubleshoot your Exchange configuration.
Oliver Moazzezi | Exchange MVP, MCSA:M, MCITP:Exchange 2010,Exchange 2013, BA (Hons) Anim | http://www.exchange2010.com | http://www.cobweb.com | http://twitter.com/OliverMoazzezi

My Ironport C170 delay to send the email to some domain

I found the problem at my IronPort C170, It always cannot sent email to some domain and show message detail code 4.4.0 or 4.4.2, then put in the queue. But I try to set to use as relay to another SMTP server, it can send mail very smoothly. Do you have any ideas that I misconfigure?
Thank you

Hi Billy, if you move mouse cursor over the number of spam messages on page Monitor>Spam quarantine, what URL address you see?
Something like https://www.domain.com:83/Search?auth=13900f1d2a029b017464c596a88bb7a8?
Can you resove "www.domain.com" to correct IP address of your ESA server?
Are Spam Quarantine>Spam Quarantine HTTP & Spam Quarantine HTTPS enabled at Network>IP Interfaces>Interface page? Do interface's IP address & spam quarantine ports match to URL address (does www.domain.com resolve to this IP address) at Monitor>Spam quarantine?
Is there any firewall blocking this connection?

I keep getting the following message when trying to send email, email rejected by server because it does not allow relaying

when trying to send emails on my Iphone i get the message
email rejected by server because it does not allow relaying
can anyone help me with this problem

Go into Settings>Mail, Contacts, Calendars>your account>Outgoing mail ServerSMTP>Primary Server then turn Server ON and fill in both User Name +Passwordunder Outgoing Mail Server.

Migrating one email domain to external server

our AD domain "domain1.com" users have @domain1.com, @domain2.com, and @domain3.com (this one is for testing usage) mailboxes/addresses on our internal Exchange 2010 14.01.0438.000 server. All users are on the same domain regardless
of the email address they use. mailboxes with @domain1.com as their primary smtp address are being migrated to an email service outside of our organization/domain but will still remain users on our domain. For those users we'll be creating a new
profile in Outlook pointed at that new external mail server to switch over to on the cutover date while leaving the existing profile as is. Following migration for a period of time we want @domain1.com users to still be able revert to their current
Outlook profile and be able to get to our OWA in case any problems/inconsistencies occurred migrating contents to the new service. It's understood that sending/receiving mail would no longer work for them on the internal Exchange server, the point is just
that they could access the old contacts/calendar/notes/tasks/emails.
My testing with migrating @domain3.com indicated that in order for domain2.com senders to be able to send mail to @domain1.com recipients after the cutover date and have the mail arrive at the external server instead of the internal server, the following
would have to be done:
-domain1.com removed from gatewayproxy attribute in recipient polices -
removal of gatewayProxy via ADSI
-domain1.com removed from exchange >> organization configuration >> hub transport >> accepted domains
-mx record pointing at external mail server added to internal dns server domain1.com zone
-domain1.com removed from smtp proxyAddresses attribute on each mailbox
It seems like there should be a way to achieve the result of getting the mail to the external server without modifying the proxyAddresses attributes so that the users could still get back into the old exchange server after cutover with their original address.
any ideas?
Thanks

the steps to get [email protected] to [email protected] mail sent to external server are clear from testing and additional testing shows some option for still getting into the old mailboxes from clients/owa but not clear is how it could be done while leaving
domain1.com mailbox addresses intact on the old Exchange server and the AD user object 'mail' attribute intact as it was pre-cutover. To expand and rephrase my original post, is there a way to make Exchange determine whether it should route domain1.com
mail internally vs externally via a global setting that would take priority over and cause to be ignored smtp proxyAddresses attributes on individual mailboxes so these don't have to be stripped/modified causing unwanted AD attribute alteration?
objective partially achieved -
AD object for [email protected] mailbox has the following attributes -
proxyAddresses = SMTP:[email protected] (Exchange primary reply-to address) & smtp:[email protected]
'mail' attribute = [email protected]
if we change primary/reply SMTP in exchange to [email protected] and remove SMTP:[email protected], the result of internal mail sent to [email protected] going to the external server is accomplished but the 'mail' attribute in AD then changes to [email protected]
which is unwanted. we still want 'mail' attribute left as is for these users since their email addresses are not changing. access to mailbox contents on old exchange server via old [email protected]'s old outlook profile + OWA still work which
is good though.
also found that adding a domain to organization configuration >> hub transport >> accepted domains as 'external relay' in addition to a send connector for the domain pointed at the MX for the external server still isn't enough to override/ignore
any proxyaddresses on the internal mailboxes. mail willl still end up at the internal mailbox.

Ironport C170 Relay outgoing Email to External Server

Similar Messages

Maybe you are looking for