Jump to content

Recommended Posts

Posted (edited)

I had a nightmare with our photocopier setting up smtp for emailing scans, Microsoft's recommended settings wouldn't work. I ended up using the mx address to get it working I think.

 

Maybe give 212.219.83.8 a try on port:25

Edited by Valsh
Posted
I had a nightmare with our photocopier setting up stmp for emailing scans, Microsoft's recommended settings wouldn't work. I ended up using the mx address to get it working I think.

 

Maybe give 212.219.83.8 a try on port:25

 

That looks like the county SMTP server which they have turned off by the look of it.

Posted (edited)
That looks like the county SMTP server which they have turned off by the look of it.

 

Definitely working for us, smtpin.lancsngfl.ac.uk is what it resolves to. Might be the old server but that photocopier had been working for years before we got migrated.

 

I recall speaking to BTLS about it the day after we got migrated and one of the guys in charge said there was a different address that you can use as well - can't remember it off the top of my head.

 

He also said they were in the process of clarifying all the changes but were going to wait until everyone had been migrated over. If you make a request then you'll probably get the info you need, might take a day or two though :rolleyes:

Edited by Valsh
Posted
Well I came in this morning and it seems to be working through both smtpin and mail. so I have set them as them for now. The office 365 one is blocked by the look of it so I will query their plans for those SMTP servers.
Posted
Gah banging my head against the wall now. The option seems to be missing for allowing external senders to send to a distribution list, has anyone else experienced this? I have tried creating a new list and it's no different.
  • 3 weeks later...
Posted

Well when I see this:

Use distribution lists in Exchange to manage email distribution. Set up distribution lists and other Exchange groups in the Exchange admin center.

 

and I click on it... I get:

403

Sorry! Access denied :(

The page may not be available or you might not have permission to open the page. Please contact your administrator for the required credentials. For new credentials to take effect, you have to close this window and log on again.

 

So I'm guessing you would have to contact BTLS??

 

(I was logged in with the itcoord address)

Posted
Yeah I get the same thing, I do remember it working a few weeks ago though - they must have clamped down on permissions a bit too hard.
Posted
Well when I see this:

 

 

and I click on it... I get:

 

 

So I'm guessing you would have to contact BTLS??

 

(I was logged in with the itcoord address)

 

You can edit groups if you own them by using the admin menu > Exchange then groups but when you come to add a person it just hangs on the screen where you select the person. I managed to add to a group using the power shell command but that's all I have managed to do so far. I'm not getting anywhere else with other commands which I assume is a permission issue ie if I do get-mailbox it only returns my mailbox and not all of them or other commands cannot find recipients or the switch on the command I am using. I'm guessing you need to be a global admin for these and these accounts are just user admins which is understandable for a lot of school setups.

Posted
I think that will be the issue. Maybe send them a request with exactly what you want them to do? The guys on the desk are normally quite helpful (for me anyway ;) ) hahah!
Posted

Okay I have had a few things done for me by them today, it was a permission issue that was stopping me and they say the "team" are looking at expanding current permissions for the admin accounts.

 

My next question is does anyone have any devices connecting through IMAP? I have been trying to configure Spiceworks without any luck. I then tried the IMAP settings on Outlook in a VM but that still doesn't work which makes me think it's being blocked? Anyone got IMAP working on your school connection?

Posted

@ChrisH

 

Also quick note about distribution lists:-

When in outlook click (the person in the top right)

Options >

Under mail go down to distribution lists>

Then click distribution groups I own (if the ITcoord created these)

And you’ll see them all. Clicking on admin > Office 365 > Groups and Set up distribution lists and other Exchange groups in the Exchange admin center does not work.

Posted
@ChrisH

 

Also quick note about distribution lists:-

When in outlook click (the person in the top right)

Options >

Under mail go down to distribution lists>

Then click distribution groups I own (if the ITcoord created these)

And you’ll see them all. Clicking on admin > Office 365 > Groups and Set up distribution lists and other Exchange groups in the Exchange admin center does not work.

 

Yup I can go that route but you can't change the allow external senders to the list.

Posted
We use these and it's working for us

 

 

IMAP4

 

outlook.office365.com

 

993

 

SSL

 

Nah it's definitely blocked for us, I ran some basic tests, then ran them from a laptop plugged into the CLEO switch to bypass all firewalls etc:

 

root@NetworkMonitor:~# openssl s_client -connect outlook.office365.com:993
connect: Connection refused
connect:errno=111


root@NetworkMonitor:~# openssl s_client -connect outlook.office365.com:995
connect: Connection refused
connect:errno=111

 

I know the above method of testing works as I tried it at home last night.

 

It does work if I try the Lancsngfl mail server:

 

IMAP

 


root@NetworkMonitor:~# openssl s_client -connect outlook.lancsngfl.ac.uk:993
CONNECTED(00000003)
depth=1 /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance CA-3
verify error:num=20:unable to get local issuer certificate
verify return:0

(edited output)

* OK Microsoft Exchange Server IMAP4 service ready

 

POP3

 

root@NetworkMonitor:~# openssl s_client -connect outlook.lancsngfl.ac.uk:995
CONNECTED(00000003)
depth=1 /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance CA-3
verify error:num=20:unable to get local issuer certificate
verify return:0

(edited output)

+OK Microsoft Exchange Server POP3 service ready

 

So I have reported the issue

Posted
Confirmed that it is blocked by their firewall so we have to put a request in :mad:

 

So you have to request on a per school basis to get them to unblock the office 365 servers from the service they migrated us to? I ended up setting up a relay for the SMTP, how does one put a request in - calling/emailing the service desk?

Posted
So you have to request on a per school basis to get them to unblock the office 365 servers from the service they migrated us to? I ended up setting up a relay for the SMTP, how does one put a request in - calling/emailing the service desk?

 

Yes sounds like a case by case basis as they were asking for IP ranges although if enough people need it who knows. Apparently I am the first one to request it which I find odd as surely someone else needs IMAP access, unless theirs is already unblocked?!?!

 

All requests to the service desk and they will be passed on.

Posted
Yes sounds like a case by case basis as they were asking for IP ranges although if enough people need it who knows. Apparently I am the first one to request it which I find odd as surely someone else needs IMAP access, unless theirs is already unblocked?!?!

 

All requests to the service desk and they will be passed on.

 

I didn't request it because I figured a few weeks after migrating us they might have sorted it out(I tested smtp.office365.com 587 the day we got migrated and then again a few days ago - same deal with IMAP). It seems that they genuinely have no clue that it's not working.

 

I'm in the same boat as you but it seems like @Mark182 has IMAP working using the microsoft servers and without any sorcery involved? No idea, either way I logged a call and as you said the guy I spoke to was genuinely surprised and forwarded it on.

Posted

Anyone got a list of IP addresses for Office365 mail servers yet, unfortunately firewall needs IP's.

 

I only want to open up the ones to Office365 and not hotmail etc.

Posted (edited)

So after talking to support and a bit of messing around the end result is they don't even want us to use "smtp.office365.com" despite being told to use it multiple times when I asked what the smpt settings were - good stuff.

 

The new information I've been supplied and I'm told was made available prior is the following:

 

If the users can set TLS by port 587 in their device the settings are:

 

 

• Mail server : smtp.education.btlsl.co.uk

• port number : 587

• Use TLS Encryption

• Requires Authentication

• Username and Password: (must be a valid Office365 account)

• Return email address: (must be a valid office365 account and identical to the one entered above)

This will work for any device/software in the network because the auth/spam is done by O365.

 

 

Devices which cannot use TLS or port 587 and require the facility to use port 25 unauthenticated relay will need their IP registering with the SMTP relay to permit them to send un authenticated messages (port 25 smtp).

Details to office systems to add IP to the permitted sender list. They will use the same smtp server name / IP as above: smtp.education.btlsl.co.uk / 212.219.83.9

Edited by Valsh
  • Thanks 1
  • 3 weeks later...
Posted

I think the above conversation explains why my e-mail notifier works out of school but not in school !

 

On the subject of getting settings changed that we don't have authority for I was told to just log a call and they will see what they can do !

 

We had a user getting blocked because of too many open sessions.

 

BTLS have changed our default timeout to 2 hours from 6 hours and the user in question is not having that problem anymore.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...