Re: SMTP troubles (AGAIN!)

On 4/12/06, James H H Lampert <jamesl@xxxxxxxxxxx> wrote:
>
>
> Confirmed: the mail server is outside. This was done so
> that the web-mail interface would work, as port 80 is
> being routed elsewhere by the firewall.


This is a mistake.  A better solution is to figure out how to make webmail
work inside the firewall.  If the Exchange server is on a different IP than
the firewall, the firewall should be able to send HTTP for that address to
the mail server and HTTP to the primary address to the current destination.
Of it should at least be able to do NAT for the mail server address.

Sending email from the Java application on the 400 to an
> address on the mail server works fine;


Sure .. the Exchange server accepts the message when addressed to a user on
that server.

sending it from the
> email server itself (through the web-mail interface) to my
> personal email address works fine.


Sure .. that it the reason for it's existence.

Sending it from the Java application on the 400 to my
> personal email address produces the bounce message I
> reported previously. The curious thing about the bounce
> message is that it purports to be from
> QGATE@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx On the CHGTCPDMN
> screen for that 400, the host name is given as "sirius,"
> and the domain as "private.touchtonecorp.com," but I can't
> imagine how a bounce message could be coming from the
> origin point of the original message.


QGATE@xxxxxxxxxxx is the standard "server" email address for the iSeries
SMTP server.  What is happening is that the iSeries SMTP server is
contacting the mail router (in this case Exchange) to transfer the message
for delivery.  Exchange is refusing the connection, because the user is not
on that server and relay is disabled.  So the iSeries SMTP server is sending
a message back to the originator.  This is the expected (and correct)
behavior when relaying is rejected.

Can anybody point me in the direction of docs and/or
> previous List traffic on how to get the OS/400-native SMTP
> sending email directly, without relaying through our mail
> server? Obviously, it's getting through the firewall,
> since it's getting to the mail server, so avoiding the
> relay should be fairly straightforward.


If you have a mail server you are better off using it .. the fewer holes in
the firewall the better.  There is no reason not to allow relaying from the
iSeries IP; if the administrator is not allowing it then follow the
instructions given by others on the list and make it his problem to get the
firewall setup properly.

--
Tom Jedrzejewicz
tomjedrz@xxxxxxxxx