New to SBS 2011 - Email
-
Saturday, February 02, 2013 8:09 PM
Hi there.
This may sound like a daft question but im very new to SBS 2011.
It's all set up with users, it connects to the internet, domain works fine and can be seen on the local network.
I dont understand how the email side works.
How do I get clients to connect to the server?
This is a 2 part question
How/where do you add the external IP adress (60.x.x.90) which would be mail.test.com
and the other question is how do I get Outlook clients to see the server? i.e ports numbers for imap/smtp
I just somebody to explain how this works or the step process (Fibre router, UTM, SBS)?
All Replies
-
Saturday, February 02, 2013 9:03 PM
Your external static IP should be on the external side of a firewall/router which then provides an internal address range (typically 192.168.x.x) via NAT. You say there is a UTM-is it capable of doing the NAT? Make sure at your DNS external hosting service there is an A record pointing to that external static IP and an MX record which will enable the mail to find your SBS. For mail port 25 needs to be forwarded from external through the firewall/router to the SBS. Use the wizard to connect computers. Are you asking about internal or external connection of Outlook to the server?
Steve
- Marked As Answer by Aiden_CaoMicrosoft Contingent Staff, Moderator Monday, February 11, 2013 2:54 AM
-
Saturday, February 02, 2013 9:48 PM
You need to open port 25 on your router/firewall device tand point it to your servers IP address for emails to come into the server.
You need to add you static IP address as a A records to your domain, unless you changed the servers address it will use remote instead of mail. you then need to create a MX record for the A record you just setup. Make sure that your server is the only MX record for the domain.
Should look something like:
remote.test.com A 60.50.70.80
mx remote.test.com 1
Once outlook is installed just open it up and it will find the details of the server and user for you, if you are using outlook 2007+.
You may need to do some googling on how to setup NAT for your router/firewall and setting up the A record and MX record.
Gareth | IT Support Bury St Edmunds
- Marked As Answer by Aiden_CaoMicrosoft Contingent Staff, Moderator Monday, February 11, 2013 2:54 AM
-
Monday, February 04, 2013 10:21 AM
Excellent Compukirk/Gareth. That really helps and I totally get it now.
I just need help with 2 more things.
1) I am planning to use Imap, Smtp and remote users/devices need to connect for email.
What port numbers do I need open for IMAP, SMTP?
2) I have installed the SSL (UCC) Cert on the server which includes the name mailgate.servername.co.uk.
Do I need to make any other modifications to the MX records? I have read on some forums that remote/mobile users connect to the server using remote.servername.com?
My current MX settings are
A mailgate 60.70.80.90
MX @ mailgate.servername.co.uk
CNAME autodiscover autodiscover.outlook.com
Thanks very much
-
Monday, February 04, 2013 10:36 AM
IMAP uses port 143 and SMTP uses port 25. Forward these ports from your router to the SBS box.
The MX settings look ok to me and are set how I would normally do it - as long as the IP address specified for the A record is your public IP you should be all set once you've done the port forwards.
MVP wannabe. I don't work for Microsoft - I just use their products.
-
Monday, February 04, 2013 6:44 PM
Hi,
Just to add why use IMAP? if you use SBS 2011 yoy have Exchange 2010 included which by default is configured to use ActiveSync for mobile devices and Outlook Anywhere for use of outlook outside your organization. Both work via https (port 443) an use the SSL certificate.
You have full synchronisation of your mailbox (including calendar, contacts, etc)
Regards Ronny
-------------
Visit my Blog or follow me on Twitter -
Tuesday, February 05, 2013 9:36 AM
You shouldn't use IMAP at all. Instead, open HTTPS port to the server (TCP 443) to enable Outlook Anywhere, Activesync, and Outlook Web App. They rock.
Your Autodiscover record is wrong and currently points to Office 365. It should point to your server. If your UCC cert includes a separate SAN name for autodiscover, you just change the cname to point to your server. If not, you need to create a SRV record for it.
As you are working with SBS, use the wizards, BPA (Best Practises Analyzer), and ExRCA (Exchange Remote Connectivity Analyzer), to set up everything right. And read the instructions the wizards provide, and search the web for the additional docs. There are plenty available.
-
Wednesday, February 06, 2013 11:08 AM
Interesting..... Ok I will consider this as you are right.
However? Can Mac Users connect using this set up?
and last of all based on your suggestion would you be kind enough to jot down a template of how you would set up your MX record.
Thanks
- Edited by NWOConspiracyGroup Wednesday, February 06, 2013 11:26 AM
-
Wednesday, February 06, 2013 1:15 PM
I am not that familiar with Mac clients but you have Outlook for the Mac and the latest version will just connect to Exchange 2010 but I am not sure if they understand Outlook Anywhere (RPC over http)
About dns records, first you need to create a DNS A record for remote.yourdomain.com that points to the external ip address of your router / firewall. The MX record should point to remote.yourdomain.com.
Regards Ronny
-------------
Visit my Blog or follow me on Twitter- Marked As Answer by NWOConspiracyGroup Monday, February 18, 2013 12:12 PM
-
Wednesday, February 06, 2013 3:28 PM
Hi Ronnypot
I've been checking out quite a few of your docs on the web which have been really helpful.
my DNS record settings at present are
A mailgate 60.70.80.90
MX @ mailgate.servername.co.uk
CNAME autodiscover autodiscover.outlook.com
Does this mean I need to change mailgate to remote and also change mailgate.servername.co.uk to remote.servername.co.uk in the above record example?
My SSL cert (UCC) has mailgate.servername.co.uk and remote.servername.co.uk
Thanks
- Marked As Answer by NWOConspiracyGroup Monday, February 18, 2013 12:12 PM
- Unmarked As Answer by NWOConspiracyGroup Monday, February 18, 2013 12:13 PM
-
Wednesday, February 06, 2013 3:30 PM
Hi Teroleskinen
What do I change the Autodiscover record to?
Thanks for your advice.
- Marked As Answer by NWOConspiracyGroup Monday, February 18, 2013 12:12 PM
- Unmarked As Answer by NWOConspiracyGroup Monday, February 18, 2013 12:12 PM
-
Wednesday, February 06, 2013 4:04 PM
Hi,
Glad they were helpful!
If your SSL certificate includes both remote and mailgate.servername.co.uk it should not matter, but if you have configured your SBS server with remote.servername.co.uk I would suggest using this to keep everything clear.
The autodiscover is as said pointing to an office 365 address so this will cause problems for outlook configuration. As autodiscover is not on your certificate you need to configure a SRV record for autodiscover. See this blog post for more information: http://www.thirdtier.net/2011/06/setting-up-autodiscover-for-sbs-2011/
Regards Ronny
-------------
Visit my Blog or follow me on Twitter- Marked As Answer by Aiden_CaoMicrosoft Contingent Staff, Moderator Monday, February 11, 2013 2:54 AM
-
Thursday, February 07, 2013 9:54 PM
In your case, the autodiscover record would probably be:
_autodiscover._tcp IN SRV 0 0 443 mailgate
Or replace mailgate with remote if you prefer using that. As long as the settings are consistent and the name is included in the cert. Please read the excellent blog post Ronny linked so you'll understand the process better.
To your other question: Native Mac Mail.app, any version above OS X 10.6, is able to connect to Exchange. For Entourage 2008, you need to upgrade to an EWS version which you can download from Microsoft. Outlook 2011 supports Exchange over EWS.
Practically all modern smartphones and tablets support Activesync and can connect to Exchange.
- Marked As Answer by Aiden_CaoMicrosoft Contingent Staff, Moderator Monday, February 11, 2013 3:01 AM
-
Sunday, February 10, 2013 2:16 PM
Hi teroleskinen
Thanks for your advice.
I read through the article and used your example in my MX record.
It works a great!
However I have another weird issue.
I used the Microsoft Remote Connectivit Analyzer and the report logs come back with green ticks and passes.
I also used the SMTP test and the report passed.
When I log in (internally via browser remote.servername.co.uk/owa) I can access emails, see emails arrive from Hotmail and other sources from the WAN. I can also reply to those messages.
I cannot get any internal clients to connect to the mail server, only through the browser.
When I use Outlook to Autodiscover, it does not find the server.
On the router, I use UPNP. Tests through Ping.eu show the ports as open. I dont understand why clients cant find Exchange?
If I do a remote.servername.co.uk/owa from home? it does not load the page.
Not sure if this is a related issue? The DHCP server keeps stopping after 5/6 seconds after I restart it in Services. Network autofix fixes this for a few seconds but then it stops after the wizard completes. There are no DHCP services running in the office or router and the DHCP server has been Authorised.
I would very much appreciate further feed back on this.
Thanks
- Edited by NWOConspiracyGroup Sunday, February 10, 2013 2:18 PM
- Marked As Answer by NWOConspiracyGroup Monday, February 18, 2013 12:11 PM
-
Sunday, February 10, 2013 5:51 PM
What does Rougechecker tool from here http://blogs.technet.com/b/teamdhcp/archive/2009/07/03/rogue-dhcp-server-detection.aspx reports?
If it doesn't reports anything (as it's not designed for ipv6 ) create DisableRogueDetection key at HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DHCPServer\Parameters to a value of 1 check if DHCP server service stay stable after this.
- Marked As Answer by NWOConspiracyGroup Monday, February 18, 2013 12:11 PM
-
Tuesday, February 12, 2013 6:03 PM
Hi there
Hi found the phone system with a router had DHCP enabled from factory default. That is switched off now.
I am still having problems setting up local clients.
Is there an option in SBS2011 to switch on for RPC over HTTP?
I cannot get Outlook to connect to the exchange server.
The same applies with remote users.
Thanks
- Marked As Answer by NWOConspiracyGroup Monday, February 18, 2013 12:11 PM
-
Wednesday, February 13, 2013 7:38 AM
Hi,
In SBS 2011 (Exchange 2010) RPC over HTTP is called outlook anywhere, this is installed and configured by default, also outlook (2007 and 2010) clients should automatic get the right configuration.
Check this blog post to see how outlook should be configured, so you can compare: http://office.microsoft.com/en-us/outlook-help/use-outlook-anywhere-to-connect-to-your-exchange-server-without-a-vpn-HP010355551.aspx
If still not working you can use https://www.testexchangeconnectivity.com/ to test if your configuration is setup right if not you get some pointers where things may go wrong.
Regards Ronny
-------------
Visit my Blog or follow me on Twitter- Marked As Answer by NWOConspiracyGroup Monday, February 18, 2013 12:11 PM
-
Monday, February 18, 2013 12:11 PM
Just a note to thank you all for you FANTASTIC help and support.
Everything works beautifully :)
- Marked As Answer by NWOConspiracyGroup Monday, February 18, 2013 12:11 PM
- Unmarked As Answer by NWOConspiracyGroup Monday, February 18, 2013 12:12 PM

