mike herchel

Hi,

I am setting up POP3 accounts for my users. I am using the POP3
and SMTP services built into Windows 2003 Server Std Edition. My users can
access their POP3 accounts, but cannot send mail to an external address
(they can send to addresses within the same email domain). When trying to
email to an external address via Outlook Express, we get the following
error:

Server Response: '550 5.7.1 Unable to relay for test@hotmail.com',
Port:

25, Secure(SSL): No, Server Error: 550, Error Number: 0x800CCC79

Note: this is installed on a Windows Server 2003 domain controller. The
Active Directory domain and the internet domain are not the same.

Notes:

I do not have Secure Password Authentication enabled. (when I
enable this option, and make the associated changes to OE, it does the same
thing)

I do have the internet (email) domain listed in the "Default SMTP
Service" under the IIS Manager

I have anonymous access selected in the properties of the "Default
SMTP Service"

Does anyone have any suggestions?

Thanks!!

kristofer gafvert

Hello,

You need to understand the difference between relaying and access. Anonymous
Access does not mean that anyone can relay. By default, you need to
authenticate to the SMTP server, to be able to send emails. I recommend that
you do not change this behavior, unless you use it in a controlled
environment, and can restrict relaying to IP Addresses.

So, you need to configure the client to authenticate to the SMTP server, or
change the default behavior of the SMTP service.

For more information:

http://www.ilopia.com/Articles/WindowsServer2003/EmailServer.aspx#ConfigureEmailClient

--
Regards,
Kristofer Gafvert - IIS MVP
http://www.ilopia.com - When you need help!

mike herchel

Thanks for the quick response.

The SMTP settings that I have are the default (only anonymous access is
checked by default). I went ahead and removed my POP3 domain, and then
uninstalled the POP3 and SMTP services. I then went ahead and followed that
tutorial (using my domain name, and active directory authentication... local
windows accounts was not an option). It still does the same thing. Any other
ideas?

kristofer gafvert

First i need to know what type of Authentication is allowed. Is it only
Anonymous? If so, please also enable Windows Authentication.
Then make sure that for Relay, "Allow all computers which successfully
authenticate..." is enabled.

Now, the SMTP server should accept credentials, and to be able to relay, we
need to log on. But...the email client is not configured for this, by
default.

So in Outlook Express, please make sure that you have enabled "My Server
Requires Authentication" for the outgoing email server. Then restart the
email client.

Still does not work?

--
Regards,
Kristofer Gafvert - IIS MVP
http://www.ilopia.com - When you need help!

mike herchel

Thanks again for the response. I tried all of that (see
http://herchel.com/tmp/emailprobs.JPG for a screenshot (it's 140kb)). Do you
have any other suggestions?

Thanks!

kristofer gafvert

Are you doing this locally on the server (testing the email client)? Is it
possible for you to test it from a remote computer? I remember some problems
when doing something locally, but i cannot remember what it was. Maybe it
was this.

Please also see in the logfile (for SMTP, i think that it is enabled by
default, you can find it in C:\WINDOWS\system32\LogFiles\ ) if you can find
any AUTH. The client should have tried that, if you cannot find it, there is
probably something wrong with the client setup.

--
Regards,
Kristofer Gafvert - IIS MVP
http://www.ilopia.com - When you need help!

mike herchel

Hi Kristofer,
Thanks for your help. I solved the problem by going into the properties
of the SMTP Service (from the IIS Snap in), then I went to the Access tab.
Then I hit the Relay button (on the bottom). From there, I granted my local
subnet the ability to relay messages. This took care of the problem.

Thanks!

mathewjzÊj.±Ø¬rë,Š‰ìš+¢ÊµÊ&

try adding the IP subnet that your users are sending from.