Change Target port SMTP MTA to internal Exchange (2024)

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sven OlafSchuranover 1 year ago

Hello,

I need to change target port to internl exchange server to port 5252. MTA mode uses port 25 as normal.

Cause of reicipent filter with callout needed, this is not working on smtp port 25, cause of exchange implementation.

This have to setup on another port diffrent from port 25.

I have added a NAT rule and Firewall rule, but it is not used.

Sven

This thread was automatically locked due to age.

Cancel

Top Replies

Erick Janover 1 year ago+1
Hi Sven, Thank you for reaching out to Sophos Community. Have you tried to use any how-to videos, documentation, Sophos Assistant, or KBA to try to check the issue? Can you share your configuration…

0Erick Janover 1 year ago
Hi Sven,
Thank you for reaching out to Sophos Community.
Have you tried to use any how-to videos, documentation, Sophos Assistant, or KBA to try tocheck the issue?
Can you share your configuration and FW rules?
Then kindly try to turn off the smtp on the Device access, then check and test.
You may also refer to the following KB
support.sophos.com/.../KB-000038880

Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos|Product Documentation|@SophosSupport |Sign up for SMS Alerts
If a post solvesyourquestion use the'Verify Answer'link.
Cancel
Vote Up+1Vote Down
Cancel
See Also
Cisco Learning Network TCP vs. UDP Ports TCP port 21 FTP vulnerabilities
0Sven OlafSchuranover 1 year agoin reply to Erick Jan
Hello,
How to Nat is known well.
I like to Nat the smtp MTA proxy sending port 25, when send mails to exchange, from target port 25 to port 5252.
I have setup a NAT rule, Firewall IPs as source, destination Excachenge, dest port 25, to port 5252, and I have a firewall rule allowing this traffic.
But it is nor working.
Sven
Cancel
Vote Up0Vote Down
Cancel
0Vivek Jagadover 1 year agoin reply to Sven OlafSchuran
Hello Sven OlafSchuran,
Sophos Firewall inspects allSMTP/Sraffic on the standard ports by default. Now you can use service-param to turn on inspection of traffic
sent over non-standard ports. Now if the port used 5252 is not working for the SMTP/S it would be great if you can try telnet or capture traffic on that port to understand the traffic flow -https://support.sophos.com/support/s/article/KB-000035768?language=en_US
Create and download a packet capture : https://support.sophos.com/support/s/article/KB-000037007?language=en_US

Thanks & Regards,
_______________________________________________________________
Vivek Jagad| Team Lead, Global Support & Services
Log a Support Case|Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up+1Vote Down
Cancel
0Sven OlafSchuranover 1 year agoin reply to Vivek Jagad
I have MTA mode running. When MTA mode sending Mails to internal Mailbox Excahnge it uses port 25. This is working as it should.
But to get reicipoient filter working I must send send Mail to the internal exchangfe server via port 5252. I have done this in SG UTM witrh a NAT rule, I am trying it the same way in XGS. But NAT is not working.
Sven
Cancel
Vote Up0Vote Down
Cancel
0Vivek Jagadover 1 year agoin reply to Sven OlafSchuran
Hey Sven OlafSchuran try the steps mentioned in the following steps:https://doc.sophos.com/nsg/sophos-firewall/19.5/help/en-us/webhelp/onlinehelp/AdministratorHelp/RulesAndPolicies/NATRules/RulesPoliciesCreateDNATAndFirewallRulesForInternalServers/index.html

Thanks & Regards,
_______________________________________________________________
Vivek Jagad| Team Lead, Global Support & Services
Log a Support Case|Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up+1Vote Down
Cancel
0Sven OlafSchuranover 1 year agoin reply to Vivek Jagad
I do not want external to internal.
I want internal firewall IP destination port 25 sending to internal exchange changed to port 5252.
I have a NAT Rule but it is not working.
Cancel
Vote Up0Vote Down
Cancel
0LuCar Toniover 1 year agoin reply to Sven OlafSchuran
Please show a screenshot of your NAT rule.

__________________________________________________________________________________________________________________
Cancel
Vote Up0Vote Down
Cancel
0Sven OlafSchuranover 1 year agoin reply to LuCar Toni
Cancel
Vote Up0Vote Down
Cancel
0Vivek Jagadover 1 year agoin reply to Sven OlafSchuran
Hey Sven OlafSchuran, mention the smtp_5252 in the original service and the under the translated service (PAT) SMTP_25

Thanks & Regards,
_______________________________________________________________
Vivek Jagad| Team Lead, Global Support & Services
Log a Support Case|Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up+1Vote Down
Cancel
0Sven OlafSchuranover 1 year agoin reply to Vivek Jagad
I smtp MTA on XGS shall send its mails to exchang server on port 5252. Standard port is 25. So I must change 25 original service to port 5252. Your Idea is changeing 5252 to 25.
Cancel
Vote Up0Vote Down
Cancel

Change Target port SMTP MTA to internal Exchange (2024)

FAQs

How do I change my Exchange SMTP port? ›

In order to change the port, run the following PowerShell commands as administrator:

Get a list of your send connectors: Get-SendConnector | select name,port.
Change the send connector port: Set-SendConnector "MySendConnector" -Port 587. ...
Verify that the port has changed.

Dec 13, 2019

Read On ›

How to choose the right SMTP port port 25 587 465 or 2525? ›

What SMTP port should be used? (short answer)

Port 587 is the default SMTP port for submission and it supports secure transmission via TLS.
Port 465 is still supported by many providers, but this is no longer an accepted standard.
Port 25 is only great for SMTP relay, not for SMTP submission.

More items...

Feb 14, 2020

Discover More Details ›

How do I change port 25 to 587? ›

Outlook Express

Open Outlook Express.
From the Outlook Express Tools menu, click Accounts.
Click the Mail tab.
Select your email account.
In the Properties dialog box, click the Servers tab.
Click the Advanced tab.
View the Outgoing mail (SMTP) Port.
Change the port from 25 to 587 and save changes.

Does Exchange need SMTP? ›

These protocols only allow clients to receive email messages, so they need to use authenticated SMTP to send email messages. Applications, reporting servers, and multifunction devices that generate and send email messages.

See Details ›

How do I change my SMTP address in Exchange? ›

To change the primary SMTP you can either use the EAC, and go to the mail addresses dialog box, or go to the Attribute editor in Active Directory Users and Computers, once you've enabled advanced view, under the view menu, and change the proxyAddress attribute to match what you need.

Find Out More ›

How do I change my SMTP port number? ›

Beneath Outgoing server (SMTP) click on the drop down bar and select "Edit SMTP server list...". Click on your desired Outgoing server and then click advanced. Select option for custom port and type in 26. Click OK.

Tell Me More ›

Should server port be 587 or 465? ›

Originally, the Simple Mail Transfer Protocol (SMTP) used port 25. Today, SMTP should instead use port 587 — this is the port for encrypted email transmissions using SMTP Secure (SMTPS). Port 465 is also used sometimes for SMTPS. However, this is an outdated implementation and port 587 should be used if possible.

Show Me More ›

How do I enable port 587 for SMTP? ›

Troubleshooting Blocked SMTP Port 587

Open the Start menu. Type Windows Security in the search bar and click on it in the results.
Click on Firewall & network protection.
Scroll down and select Allow an app through firewall.
Find your email client or port 587 entry and ensure it's allowed.

Apr 26, 2024

Explore More ›

How do you check if SMTP port 587 is open? ›

Use a Telnet command to check the connection

To check the connection with the SMTP port, use the following telnet command: Write down telnet smtp-relay.brevo.com ### in your console and make sure to replace ### with the port number you're trying to connect to, which is either 587, 2525, or 465.

Does Exchange use port 587? ›

For authenticated SMTP, Exchange Server uses the client front-end on port 587, but you must have a mailbox to authenticate and use port 587.

Show Me More ›

What is 587 exchange port? ›

Port 587: This port is typically used for email submission by mail clients (e.g., Outlook, Thunderbird) to a mail server. It is part of the standards defined in the Simple Mail Transfer Protocol (SMTP) for email transmission.

Read The Full Story ›

How to check SMTP settings in Exchange? ›

Find your Exchange mailbox server settings

In Outlook Web App, on the toolbar, select Settings. > Mail > POP and IMAP. The POP3, IMAP4, and SMTP server name and other settings you may need to enter are listed on the POP and IMAP settings page.

See Details ›

Is SMTP obsolete? ›

We don't recommend that you use the SmtpClient class for new development because SmtpClient doesn't support many modern protocols. Use MailKit or other libraries instead. For more information, see SmtpClient shouldn't be used on GitHub. The SmtpClient class is obsolete in Xamarin.

Get More Info Here ›

What is the default port for SMTP on the Exchange server? ›

Port 587 is the default mail submission port.

When an email client or outgoing server is submitting an email to be routed by a proper mail server, it should always use SMTP port 587 as the default port.

How to configure SMTP on Exchange? ›

To configure SMTP authentication in Microsoft Exchange:

In the Exchange Management Console, navigate to Organization Configuration > Hub Transport.
Select the Send Connectors tab.
Select the send connector that you created and click Properties.
On the Network tab, select the smart host that you created and click Change.

More items...

How do I change the SMTP port in Outlook? ›

How to amend your SMTP port in Outlook Express

Open Microsoft Outlook Express then select Tools » Accounts.
Select the Mail tab in the top navigation and highlight the account you want to change the outgoing port for. ...
Now select the 'Advanced Tab' and change the Out-Going Server Port to 587 then click 'OK'

More items...

View Details ›

What is the default port for SMTP exchange? ›

Port 587

How to change SMTP settings in Outlook 365? ›

Once you log in to the Microsoft Outlook mail app, use the toolbar and navigate to File > Account Settings > Server Settings. Then, click on Outgoing Mail to set up your SMTP Outgoing Server settings.

Learn More ›