Exchange and SPF

[atechstl]

I have setup a few clients with an exchange server at their location. Rather than changing over MX records from the web server, I setup the exchange to POP the webserver every 15 minutes. SMTP sends out on port 26. This is all done on a dynamic IP address with dyndns.org DynDNS updater software.

This setup worked fine with my last host (a reseller account), but now I am on here with JPC and I cannot seem to get it working correctly.

Support recommended that I setup a SPF record in DNS so I did. At the same time, I noticed when I transfered my other accounts they had SPF records that pointed from the other server. Oops! I got rid of them.

This is the current SPF I have in place: "v=spf1 a ~all"

I waited a few hours and still no luck. I cannot sent out mail.

Which SPF will work for this?

[atechstl]

I really need some help on this one. Anybody?

[jason]

Does the exchange server send mail directly to the Internet or does it pass it all through JPC's SMTP server? If the JPC server is the only one that has contact with the 'net then you should be fine. If the Exchange server is sending directly to the Internet then I think you'd want to add that server to the SPF record as well...I'm not an SPF expert, though, so I could be wrong. I think you want something like "v=spf1 a a:exchangeserver.dyndns.com ~all."

Like I said, I'm not an expert in this stuff, so I could be wrong.

--Jason

[Pawel Kowalski]

I'm guessing you are using the built in pop3 connector from small business server? Is your pop3 mail being routed correctly to your client's exchange mail boxes? And I'm also guessing you are using Jag's smtp server to route your emails?

When I set up this way I did not have to change any spf records, it works perfectly out of the box. Assuming your pop3 connector is deliverying emails properly make absolutely sure that your SMTP connector is configured properly. Do you have any emails in your queues? Have you set up the proper username and password to authenticate with Jag's smtp servers? Can you telnet to jag's smtp server inside of the network your exchange server is in?

[JPC-Masood]

This may help you: http://www.jaguarpc.com/support/kbase/681.html

[atechstl]

Yes I am using Small Business Server 2003.

1. I am using Jags SMTP server to route the emails out. To avoid problems with the ISP I have setup SMTP to send out on port 26. This worked with my last host no problem.

2. Username and Passwords authenticate fine. Everybody is receiving emails just not sending.

Steps taken:
Of course I tried many SPF records, still no luck. In fear of creating the wrong SPF record, I tried deleting this record and seeing if it would work. Just like "The Hot Web" said, he does this and it works right out of the box. I have tested no SPF record, but I haven't given it much time to propigate. It hasn't worked yet.

That knoldgebase Article is a great read. I have read it and tried implimenting all the ideas on it and still no luck.

This all worked fine at previous host (whom I don't care for). I transferred the accounts with this trouble over via transfer with password in WHM. So it coppied over everything. DNS settings appear to be normal.

I also contacted support on this issue. I thought I was very descriptive but they honestly don't seem to be very helpful on this one. They have given me great advice, but not the answer. They do do a great job, though. Very impressed compared to my last host.

Any other ideas?

[Pawel Kowalski]

Are you sure your jag mail server is set up on port 26? What happens if inside your exchange network you go to your command prompt, type telnet, hit enter. Then type:

o mail.yourserver.com 26

Does it connect?

Also, when I talked about authentication I didn't mean on the pop3 side, by default jaguarpc is set up so you have to authenticate with the smtp server before it will relay outgoing mail. I am going off memory here but if you go to your system manager > right click the smtp connector your are using, go to the advanced tab, and you should see outbound security. Make sure this is set properly.

[atechstl]

When I telnet to mail server on port 26 the connection fails. I guess I will have to have port 26 configured.

I will figure out how to do that or check with support and get back with you.

[Pawel Kowalski]

Can you telnet to port 25 or will your ISP block it?

But support should be able to set you up on port 26, I'm not sure as I've never asked them. I think you can also try to use secure smtp which uses a different port but I've never tried this on the exchange smtp connector. I think you would have to play with tls authentication which is something I have never done. Might just be easier to have jagpc configure it to a different port or if thats not possible you might be able to contact your ISP to unblock port 25 for you.

[atechstl]

The ISP blocks port 25, so I just used 26 with the last host. I just submitted a ticket to turn 26 on. I looked into the secure SMTP connection and tried activating that port but had no luck. Didn't see an option to add the shared SSL in my settings on the sbs.

[Pawel Kowalski]

Now that I think about it if you change your smtp port to 26 how will outside servers know that? Won't that prevent you from getting external email from places such as yahoo that try to connect to your smtp server using the default port?

If this is a problem you should be able to use your ISP as the outgoing mail server if they won't unblock posrt 25 for you, many ISPs will. I know qwest let me do this when I asked them.

[atechstl]

There should be a way to setup both ports, 25 and 26. (whether support does that correctly, we will see). That is how they did it at my last host.

If this doesn't get fixed soon, then yes I will make the appropriate changes to accomodate the IPS's mail server.

[atechstl]

Problem solved! Tech support activated port 26 and I am up and running. Thank you very much "thehotweb" for your help. You helped me realize port 26 was not opened. I mentioned I was using port 26 to tech support but they just didn't pick it up. Oh well, it working now.

By the way Peter Griffen Rocks! LOL

[Pawel Kowalski]

No problem, glad I could help.

I sent you a pm, when you get a second could you check it?

[atechstl]

Checked your PM and replied. Thank you for your help.