Cannot access exchange server from external networks

Gregory Aku 0 Reputation points
2024-12-28T03:48:45.5666667+00:00

I set up an exchange server in my home lab, it's working smoothly on my network, I can access my owa and ecp link from all my workstation inside my network, I have my domain registered and also configured the A record to my public IP address, but cannot reached my exchange server from an external network nor send email to external email addresses, I was told that Comcast blocked port 25 in residential areas, is there any other way that I can bypass that or use a different secured port ?

Microsoft Exchange
Microsoft Exchange
Microsoft messaging and collaboration software.
620 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Jenne Li-MSFT 1,080 Reputation points Microsoft Vendor
    2024-12-30T09:07:24.8766667+00:00

    Hi @Gregory Aku

    Thanks for posting your question in the Microsoft Q&A forum.

    According to your description, you are facing the problem that you cannot access the exchange server from the external network and cannot send emails to external email addresses. You learned that Comcast blocks port 25 in residential areas and wonder if there are other ways to bypass it or use other secure ports. As you described, this may be the reason why Comcast blocks port 25. You can try the following steps to use other ports:

    1. In EAC, go to "Mail Flow > Receive Connectors". In the list of receive connectors, select Client Frontend <Server name> and click Edit.
    2. In the Exchange Receive Connector page that opens, click Scoping. In the FQDN field, enter the SMTP server FQDN to be used for authenticated SMTP client connections. Make sure the port of the connector is set to 587 and the encryption method is set to TLS.
    3. Specify the certificate for authenticated SMTP client connections through the command.
    $TLSCert = Get-ExchangeCertificate -Thumbprint <ThumbprintValue>
    
    $TLSCertName = "<I>$($TLSCert.Issuer)<S>$($TLSCert.Subject)"
    
    
    Get-ReceiveConnector -Identity "Client Frontend*" | Set-ReceiveConnector -TlsCertificateName $TLSCertName
    
    1. Configure Outlook on the web to display the SMTP settings server for authenticated SMTP clients through commands.
    Get-ReceiveConnector -Identity "Client Frontend*" | Set-ReceiveConnector -AdvertiseClientSettings $true
    

    Refer to: Configure authenticated SMTP settings for POP3 and IMAP4 clients in Exchange Server | Microsoft Learn

    If you have any questions, please feel free to contact me. If the answer is helpful, please click "Accept Answer" because it can help other members of the Microsoft Q&A community who have encountered similar problems and are looking for solutions. Thank you.

    Best,

    Jeanne


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.