How to publish Exchange Server in Fortigate

[#1]

Hello, I configured exchange server behind fortigate ,The OWA is working properly and I can send email but cannot receive any email , I got this error " Sorry, no mailbox here by that name. (#5.1.1)" I just using Virtual IP , is there any special setting I missed ? thanks

[#2]

I tried again to telnet from outside the LAN , I got black screen without any text appeared or error . the telnet is working properly when trying from lan to internal IP of exchange. I tried to tracert & it is complete to the end without any problem Also I can ping the external IP of exchange successfuly

[ede_pfau]

thanks Maik, I meant telnet to the SMTP port but didn' t write it...still not running at 100%. OWA can work with the same VIP as the VIP is not port-forwarding. Hossam, I completely agree with Maik' s observations. Check the server logs first.

[discoveryit]

you should setup your VIP with port 25 forwarded inbound. instead of forwarding the entire range. That allows you to use that IP for other things. Telnet should look like this telnet mail.server.com 25 <tests port 25 not 23.

[discoveryit]

Vip Policy

[#6]

thank you for your response , I tried to specify the port as you described but the same problem beside in this case I cannot login from outside using OWA

[ede_pfau]

OWA can work with the same VIP as the VIP is not port-forwarding.

I say it again in other words: OWA cannot work with the same VIP _if_ it is port-forwarding SMTP. If you don' t read the posts then this is fruitless.

tried to tracert & it is complete to the end without any problem Also I can ping the external IP of exchange successfuly

Does that mean you pinged 2 different IPs? Which ones? We are still guessing instead of getting information - I already asked for the IPs 7 posts ago. And again, what do you see in the server logs?

[#8]

What is wrong with you ? why you are talking to me like this ???? You replied to Maik

OWA can work with the same VIP as the VIP is not port-forwarding.

I replied to discoveryit

I tried to specify the port as you described but the same problem beside in this case I cannot login from outside using OWA.

so what ?????? what is wrong ???? I described to discoveryit that when I I enable port-forwarding OWA didn' t work .

Does that mean you pinged 2 different IPs? Which ones? We are still guessing instead of getting information - I already asked for the IPs 7 posts ago.

I Said I can ping just the external IP , the VIP of exchange server, I don' t sad two IP please check this diagram The VIP = 1.1.1.2 & this the MX record

[ede_pfau]

Keep it cool. It' s only a technical issue. All I was saying is that you waste time configuring a port-forwarding VIP. I stated that both SMTP and OWA are working because it is not a port-forwarding VIP, then you tried it and voila OWA stopped working. That was for sure.

I tried to tracert & it is complete to the end without any problem Also I can ping the external IP of exchange successfuly

" Also" makes me believe that you tracerouted to one IP, and pinged to the VIP. If you tracerouted and pinged to the same IP (the VIP) then this doesn' t say much, as both use ICMP. Still it looks like your problem is with the TMG. What do the logs say?

[#10]

reply

I' ll check the log & post it here , but I noticed strange thing , when I enable the policy that allowed VIP my ip " client computer behind the FW" " on the internet is changed from the real ip of fortigate into the VIP . and when I disable this firewall policy I got the real fortigate ip

[#11]

I didn' t get any logs in TMG 2010 server , so How can I log Exchange traffic in Fortigate to ensure it passed to TMG ????