question

LuLaCeK-8731 avatar image
0 Votes"
LuLaCeK-8731 asked KaelYao-MSFT edited

Exchange 2016 - IMAP/SMTP Auth on port 587

Hi guys,
need help with Outlook, to use smtp port 587 for outgoing mail.
The problem is, I cannot authenticate user on port 587 (Client Frontend Connector), but if I change SMTP port to 465 (Client Proxy connector), then AUTH is working.
The port 25, for anonymous is working, but I want to AUTH users. Why is port 465 working and 587 is rejecting AUTH?

119895-auth587.png



Here are connectors permissions:
119864-exchange-setup.png

Here is the log of "Client Frontend connector":
119985-119829-log.png

And here is the connector cert:
119879-connector-setup.png

office-exchange-server-administrationoffice-exchange-server-mailflow
auth587.png (23.4 KiB)
exchange-setup.png (114.7 KiB)
119829-log.png (43.2 KiB)
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @LuLaCeK-8731

Thanks for your detailed information.
While the settings seem correct to me.

Sorry I may need to ask a few more questions:

1) What is the detailed error when you run the "Test Account Settings" in Outlook?
120113-23.png
2) Have you configured the following settings in Outlook?
120078-25.png
3) Dose this issue occur on all internal and external Outlook clients or just external clients?

Thanks in advance for your update.

0 Votes 0 ·
23.png (25.3 KiB)
25.png (12.2 KiB)

1 Answer

LuLaCeK-8731 avatar image
0 Votes"
LuLaCeK-8731 answered KaelYao-MSFT edited

Hi @KaelYao-MSFT

External client (Office 2016)

120089-outlook-outgoing-server.png


120168-outlook-advance.png


120188-error.png


But, when I change port to 465, AUTH is working, same user name, same password. Just port is changed.
120223-465.png


120204-465-2.png


On Internal client (Office365 Client) is the same problem, but when i change port to 465 again, it is working:

120157-internal-587.png
120069-internal-error.png



outlook-advance.png (38.9 KiB)
error.png (19.0 KiB)
465.png (38.2 KiB)
465-2.png (22.4 KiB)
internal-587.png (61.4 KiB)
internal-error.png (51.1 KiB)
· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,

Thanks very much for the detailed information.

While I suppose there may still be some incorrect settings on the Client Frontend <servername> receive connector.

Just to confirm it, please run this command in EMS:

 Get-ReceiveConnector -Identity "MLB-EXC-01\Client Frontend MLB-EXC-01" | Format-List

And would it be possible to create a new receive connector and have it listen on port 587 as a workaround?
You may also need to add the remote ip address of the Outlook clients to the Remote network settings so the clients will use this new receive connector instead of the default one.

0 Votes 0 ·

Hi,

so I ended up by recreating all receive connectors. Recreating fixed my problem, everything is working now.

But I don't understand the Client Proxy connector.

Client Proxy – Hub transport service which accepts emails sent from frontend services and sends to mailbox transport service on port 465. This receive connector accepts proxied POP and IMAP connections sent from front end transport from receive connector called Client Frontend.

In MS's Doc is wrote "Clients don't directly connect to these connectors." In receive connector section.

I don't get, what this stand for, why are client (Outlook in my case) able to connect to this port to this connector.
Why are client able to use both 465 and 587 ports.

0 Votes 0 ·

Hi,
I tested in my lab and was also able to use port 465.

Sorry I didn't find any more detailed document on this topic.

While, it is mentioned in this Exchange tech blog: Exchange TLS & SSL Best Practices
that port 465 is never supported by Exchange.
121819-37.png


0 Votes 0 ·
37.png (71.2 KiB)

Hi @LuLaCeK-8731

Just checking in to see if above information was helpful. Please let us know if you would like further assistance.

0 Votes 0 ·
Show more comments