Configure Fortimail as smart host for sending emails from Exchange 2010

[Johnsmith]

I have Fortimail VM v5 configured in gateway mode and want to use Fortimail as a smart host for our Exchange 2010 server to send emails. How do I configure Fortimail with a user name and password that the Exchange server can authenticate with? Thanks for any help.

[Bromont_FTNT]

Typically an access control policy is configured on the Fortimail to allow relay from the Exchange server IP address. However if authentication is needed you' ll likely want to set up an LDAP profile then an authentication profile can be attached to the session IP policy matching the Exchange server IP address.

[Johnsmith]

Thanks, i' ve got the Exchange server using FortiMail as a smart host. The problem now is that when i send an email it appears to goes through fortimail (see log below) but never gets to the recipient Column Content # 1 Date 2013-09-19 Time 14:28:42 Classifier Not Spam Disposition Accept From test3@domain.co.uk To user@domain1.co.uk Subject test message1 Session ID r8JDQRPY007284-r8JDQRPZ007284 Client [192.168.2.100] ****Exchange Server***** Destination IP 192.168.2.101 ****Fortimail box***** Length 29 Direction out Mailer mta Policy IDs 1:1:1 Resolved OK Log ID 0200007285 Level information Type statistics

[Bromont_FTNT]

When looking at that log, try doing a right-click and " Cross search" then look for the event log with " to=<...." in the message field Does that entry give any insight?

[Johnsmith]

It' s just showing as deferred and connection timed out Content Log Type Event Date 2013-09-19 Time 15:41:25 Message to=user@outlook.com, delay=00:07:35, xdelay=00:07:01, mailer=esmtp, pri=30371, relay=mx2.hotmail.com. [65.54.188.94], dsn=4.0.0, stat=Deferred: Connection timed out with mx2.hotmail.com. Action NONE Level information Type event UI mail User mail Session ID r8JEWbSo008418-r8JEWbSp008418 Log ID 0008008422

[npassion]

You could try a couple of commands on CLI to test connectivity with the remote host: 1. # exec ping mx2.hotmail.com PING mx2.hotmail.com (65.55.37.120): 56 data bytes 64 bytes from 65.55.37.120: icmp_seq=0 ttl=240 time=10.1 ms 2. # exec smtptest mx2.hotmail.com Connected 220 COL0-MC3-F45.Col0.hotmail.com Sending unsolicited commercial or bulk e-mail to Microsoft' s computer network is prohibited. Other restrictions are found at http://privacy.microsoft.com/en-us/anti-spam.mspx. Thu, 19 Sep 2013 08:06:24 -0700

[Bromont_FTNT]

Ya looks like the Fortimail can' t connect out to mx2.hotmail.com Is there a firewall that needs to be configured to allow port 25 out from the Fortimail?

[npassion]

Did you set up default route on FortiMail? You can configure it under System -> Network -> Routing on GUI.