Difficulty with routing group Please help

[dnack]

Hi i have a routing group connector between a 2 WAN link. However if i enable a smarthost that is in my DMZ (at the smtp virtual server, delivery tab), all the internal mail that are suppose to send across the routing group connector will instead go to the smarthost and stuck there forever. I actually want to send external email through the smarthost in the DMZ and the internal mail will go through the routing group connector.

Do i have to create another smtp virtual server ?

 

[PScottC]

No create an SMTP Connector for the Organization. Set the Address Space to * and configure one of your exchange servers as the bridgehead. Then change the outbound path to your dmz host by inserting the IP in square brackets.

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[dnack]

Sorry i don't quite understand. In the routing group connector, i have already include the exchange server at the remote site as a bridgehead server. Currently, i dont have any smarthost configure on my exchange. Therefore the internal email will route through the routing group connector and reach the remote exchange server across the WAN. For external mail the exchngne smtp will send direct.

I want external mail to send through smarthost and internal mail to use routing group connector. what do i do?

No create an SMTP Connector for the Organization <--- no create mean what? remove it ?

 

[PScottC]

Ok... If I understand you, you want your mail flow to look something like this:

Internet
^
|
v
[blue] GW
^
|
v
BH<-->RS

GW[/blue] = Gateway SMTP server in DMZ
[blue]BH[/blue] = Bridghead Exchange Server
[blue]RS[/blue] = Remote Site Exchange Server

When you set up your routing group connector, it only affects intra-organization mail flow. Any mail outbound to the internet will be handed to the local SMTP service on the Exchange server for direct delivery. The local SMTP service will do a DNS lookup, connect to the remote host on the internet and deliver the mail.

What you want to do is make sure that all outbound mail goes through your DMZ host. To do this, you have one additional step after creating the Routing Group Connector. You must create an SMTP Connector for the organization.

Since you're probably looking at the ESM in routing group view, drill down the tree to this location:
<OrgName(Exchange)>\Administrative Groups\First Administrative Group\Routing Groups\First Routing Group\Connectors

Right-click on this folder and choose new->SMTP Connector.

On the General Tab set the name to Outbound SMTP, set the Local Bridgehead to your BH server, and set "Forward all mail through this connector to the following smart host" to the IP Address of your GW server enclosed in square brackets [].

On the Address Space tab, click on Add, then click OK 2x on the pop-up windows. This creates an SMTP address space of *, which means all mail that doesn't belong to your organization. The Connector Scope is Entire Organization.[red]DO NOT CLICK THE CHECKBOX MARKED "ALLOW MESSAGES TO BE RELAYED TO THESE DOMAINS". THIS SETTING WILL MAKE YOU AN OPEN RELAY[/RED]

Click OK again to finish creating the connector.

Once you have set this up, all outbound mail will go to your bridgehead server first, then get relayed to your DMZ host.

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[dnack]

Thanks for you help so much. Site A and Site B have internet access. Therefore external mail on each side will go thorugh the smart host on their respective site.

Site A and B are at the different administrative group. Am i right to say i need to configure smtp connectors on the "Routing Groups\First Routing Group\Connectors" on both administratve group ?



Internet
^
|
v
GW1
^
| (External mail in site A will go through GW1)
v
BH (Site A)
^
| (Internal Mail across BH server)
V
BH (Site B)
^
| (External mail in Site B will go through GW2)
V
GW2
^
|
V
Internet

 

[PScottC]

Yes. That would be correct.

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[dnack]

Hi after configuring, i could't not send out any mail.

I went to ESM and opened up the Queue for the DMZ frontend server and the Exchange server (trusted network, bridgehead server ) Some messages are holding up at "Message queue for deferred delivery".

Thanks for helping

Rdgs
DnAcK

 

[PScottC]

3 things... Since you are setting up 2 SMTP connectors, you set the connector scope to Routing group, yes?

Does your firewall permit you to send smtp to the FE server?

Does your FE server allow the BE host to send mail to any domain?

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[dnack]

1) i set to entire organisation, which one should i set ?

2) yes it was open. The mail is at the FE server deferred to be sent

3) I juz enable the FE server. Where do i allow the BE host to send to all domain ?

Thanks

 

[PScottC]

Here: A picture is worth a thousand words...

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[PScottC]

[URL unfurl="true"]http://www.freeluna.net/tek-tips-images/t955-1041086-1.jpg[/url]

[URL unfurl="true"]http://www.freeluna.net/tek-tips-images/t955-1041086-2.jpg[/url]

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers