Port 25 - SMTP => users can't send mail

[Aurélien]

Hi everyone,

We are experiencing a problem on a Windows 2003 Terminal Server Edition,
only administrator account (and accounts with admin rights) can send mails
throught our internet provider SMTP.

Pop access always works, no matter what account, but SMTP access seems to be
locked for users (no response from smtp)

I've looked on MS KB without success

Do you have any idea that could help us ?

Thank you for advance

 

[Guest]

Can't send email with a specific application? What if they go to the cmd
prompt and do:

"telnet IP_Address_of_Destination_Server_or_internal_SMTP_Server 25"

It sounds like an application issue,not a TCP/IP issue. Let me know if they
can connect to a SMTP host this way.

 

[MoiToo]

Unless your ISP has an authentication method (i.e. you are in the same AD
Domain, or Kerberos Realm), the rights of the user attempting to send are
irrelevant, as the ISP is unable to determine in any form any of the
permissions the user has.

I would look for account settings, such as SPA (Secure Password
Authentication) to see if this is why the connection does not work (Although
not a direct answer to your problem, it is somewhere to look).

The telnet command Patrick told you about will prove that the port 25 is
open or not from that PC. If the port can be reached as an administrator,
but not a user, YOUR firewall/NAT device/router is aware of usernames in
your domain, and filters accordingly.

 

[Aurélien]

Can't send email with a specific application? What if they go to the cmd

prompt and do:

outlook express

"telnet IP_Address_of_Destination_Server_or_internal_SMTP_Server 25"

it works

It sounds like an application issue,not a TCP/IP issue. Let me know if
they
can connect to a SMTP host this way.

yes they can

seems to be and outlook express rights problem ?

thanx

Aurélien

 

[Aurélien]

Unless your ISP has an authentication method (i.e. you are in the same AD

Domain, or Kerberos Realm), the rights of the user attempting to send are
irrelevant, as the ISP is unable to determine in any form any of the
permissions the user has.

I would look for account settings, such as SPA (Secure Password
Authentication) to see if this is why the connection does not work
(Although not a direct answer to your problem, it is somewhere to look).

The telnet command Patrick told you about will prove that the port 25 is
open or not from that PC. If the port can be reached as an administrator,
but not a user, YOUR firewall/NAT device/router is aware of usernames in
your domain, and filters accordingly.

definetly not a firewall, ISP problem (it works for several admins account
on the same server)

thanx

Aurélien

 

[Aurélien]

Hi,

I tried BLAT which seems to work

here is the log under an user account (no admin rights, outlook express
getting stmp timeouts)
----
C:\Blat>BLAT.EXE Readme.txt -TO (e-mail address removed) -SUBJECT Message_Blat -debug
Sending Readme.txt to (e-mail address removed)
Subject:Message_Blat
Login name is (e-mail address removed)
<<<getline<<< 220 Relais Altitude Telecom<<<getline<<< 250-Relais1.altitudetelecom.fr
250-PIPELINING
250-SIZE 502400000
250-VRFY
250-ETRN
250-XVERP
250 8BITMIME<<<getline<<< 221 Bye
----

strange isn't it ?

it really seems to be an outlook express problem but I can't find any OE
rights managment !!!

thanx for any help