Hi Guy's,
We are having trouble setting up a second email domain on our exchange
server which i hope you can help me with.

we have domain1.com.au successfully sending and receiving smtp mail.
We'd like to also have domain2.com.au to selected users.

Our ISP has said that all mx records are correctly pointing to our static ip
for both domains.
I have followed the KB articles in setting up policies and made sure the
second smtp address is the default on the individual users that require it
but we keep getting the attached error.
any help would be much appreciated.
I should mention that our isp does email and spam filtering for us but they
swear that this shouldn't affect it (which it doesnt on our first smtp
address)
Thanks
Leo

- These recipients of your message have been processed by the mail server:
leom@domain2.com.au; Failed; 5.5.0 (other or undefined protocol status)

Remote MTA mail.alwaysonline.net.au: SMTP diagnostic: 554
<leom@domain2.com.au>: Relay access denied

Reporting-MTA: dns; smtp01.syd.iprimus.net.au
Received-from-MTA: dns; cpms01.int.iprimus.net.au (192.168.20.147)
Arrival-Date: Sun, 10 Oct 2004 09:31:45 +1000

Final-Recipient: rfc822; leom@domain2.com.au
Action: Failed
Status: 5.5.0 (other or undefined protocol status)
Remote-MTA: dns; mail.alwaysonline.net.au
Diagnostic-Code: smtp; 554 <leom@domain2.com.au>: Relay access denied

al mulnick

Can you send to those users internally? By that I mean set up a connection
internally to your server via SMTP and send to that second domain
successfully?

Which KB articles?

Cause looking at this,


It looks like your server thinks it's not authoritative for domain2.com.au.
And that's what Reporting-MTA: dns; smtp01.syd.iprimus.net.au found out when
it NDR'd the message.

I followed:
KB Article 268838,
i'm not sure how to send via smtp internally
would i be right to guess just to type their smtp address:
bill@domain2.com.au?
Leo

al mulnick

Did you verify that the users you specified in the policy have that email
address?
I'm referring to opening a conversation with TCP 25 of your mail server from
your network. I'm trying to ascertain whether or not there is something off
your server that is causing the issue. The best way I know to do that is to
isolate the problem beginning with the mail server itself and working
backwards.

To send via TCP 25 using telnet, have a look at this:
http://www.netadmintools.com/art276.html

Note that the bold type is the commands you enter. The mail addresses and
domain should be yours vs. the ones you see.

Basically,
telnet yourmailserver_FQDN 25
helo yourdomain
mail from: user@domain1.com.au <<<<this should be a valid address so you
can see the NDR if it happens
rcpt to: user@domain2.com.au
Data
subject: test 1

body of data

.. <<<end with the period after a blank line

Let us know how it goes.

Hi Al,
I will do the port 25 test tonight but the fact that there is already mail
comming in to the first domain, @domain1.com.au wouldn't that mean that port
25 is open?

Yes all the users do have the email address, some as the primary and some as
secondary.
Thanks for your help and suggestions.
Leo

Hi Al,
just got back from the site and tested sending an email using telnet as per
the link you sent me, it worked fine!!!

so that kind of leaves me really really stumped.
The ISP says that i must have the exchange server configured wrong as the
error message contains the relay not allowed message, port 25 is open on my
router as the first domain is receiving mail.

I have added the second domain to the default domain policy in system
manager, should i delete it from there and create a second policy in system
manager? would this be a better idea? as this way we can control who does and
doesn't have that secondary email.
Thanks again for your help
leo

al mulnick

You certainly could do that with the policies. Wouldn't hurt for control
purposes.

However, if you can telnet directly to the server and it works fine FOR BOTH
DOMAINS, then the policy is not your issue most likely.

Can you post the error message exactly as you got it? If that's not
possible since it's a newsgroup, you can reach me offline at
amulnick_at_nc.rr.com

What I'm interested in the most is the reporting MTA. I'd also be happy to
send a message to that domain to see the error report. There is still
something in between that's not playing like it should and is domain
specific apparently.

Al