求助：exchange能收到外部邮件，不以发送外部邮件

cakerwu

ISA里的规则开放网内所有电脑的DNS
exchange服务器可以正常上网。
所有的配置都检查过。
使用netdiag /test:dns 结果如下
.........
    Computer Name: OLYMEXCH1
    DNS Host Name: olymexch1.olympic.com
    System info : Windows 2000 Server (Build 2195)
    Processor : x86 Family 15 Model 2 Stepping 9, GenuineIntel
    List of installed hotfixes :
        KB822343
        KB823182
        KB823559
        KB824105
        KB825119
        KB826232
        KB828035
        KB828749
        KB832353
        KB832359
        KB841356
        KB842773
        KB883935
        KB885836
        KB890046
        KB893756
        KB893803v2
        KB896358
        KB896422
        KB896423
        KB896424
        KB899587
        KB899589
        KB899591
        KB900725
        KB901017
        KB901214
        KB904706
        KB905414
        KB905749
        KB908519
        KB908531
        KB911280
        KB911564
        KB911567-OE55SP2-20060317.162653
        KB912919
        KB913580
        KB914388
        KB914389
        KB917008
        KB917344
        KB917422
        KB917537
        KB917736
        KB917953
        KB918899-IE501SP4-20060725.072042
        KB920670
        KB920683
        KB920685
        KB920958
        KB921398
        KB921883
        KB922582
        KB922616
        KB923191
        KB923414
        KB924191
        KB925486-IE501SP4-20060918.174951
        Q147222
        Q828026
        Update Rollup 1

Netcard queries test . . . . . . . : Passed

Per interface results:
    Adapter : Local Area Connection
        Netcard queries test . . . : Passed

Global results:

Domain membership test . . . . . . : Passed

NetBT transports test. . . . . . . : Passed
    List of NetBt transports currently configured:
        NetBT_Tcpip_{A7142E67-62AB-4E6F-AEB9-B29550E5C823}
    1 NetBt transport currently configured.

DNS test . . . . . . . . . . . . . : Passed
    PASS - All the DNS entries for DC are registered on DNS server '192.168.0.15
0' and other DCs also have some of the names registered.

The command completed successfully

而且在该台服务器上使用nslookup命令完全可以正确的解析正常驻的MX记录。

看样子是网络很正常的样子。可是怎么都发不出去。
然后在网上找了半天，也没有找出个所以然来。刚刚找到了一个SMTPdiag。结果测试了一下。

使用smtpdiag的症断结果如下：
C:\>smtpdiag XXXX@XXXXX.com cakerwu@yahoo.com.cn -d 202.96.128.68 /v

Searching for Exchange external DNS settings.
Computer name is OLYMEXCH1.
VSI 1 has the following external DNS servers:
202.96.209.133,202.96.128.68,202.96.134.134
Checking SOA for yahoo.com.cn.
Checking external DNS servers.
Checking TCP/UDP SOA serial number using DNS server [202.96.209.133].
TCP test succeeded.
UDP test failed.
Serial number: 2006091501
Checking TCP/UDP SOA serial number using DNS server [202.96.128.68].
Failed: DNS server [202.96.128.68] may be down.
Checking TCP/UDP SOA serial number using DNS server [202.96.134.134].
Failed: DNS server [202.96.134.134] may be down.
Checking internal DNS servers.
Checking TCP/UDP SOA serial number using DNS server [192.168.0.150].
TCP test succeeded.
UDP test failed.
Serial number: 2006091501
DNS server [202.96.128.68] did not return a valid SOA record.
DNS server [202.96.134.134] did not return a valid SOA record.
SOA serial number match: Failed with one or more failures.
Checking local domain records.
Starting TCP and UDP DNS queries for the local domain. This test will try to
validate that DNS is set up correctly for inbound mail. This test can fail for
3 reasons.
    1) Local domain is not set up in DNS. Inbound mail cannot be routed to
local mailboxes.
    2) Firewall blocks TCP/UDP DNS queries. This will not affect inbound mail,
but will affect outbound mail.
    3) Internal DNS is unaware of external DNS settings. This is a valid
configuration for certain topologies.
Checking MX records using TCP: olympic-pcb.com.hk.
Warning: The TCP DNS query returned no results.
Checking MX records using UDP: olympic-pcb.com.hk.
Warning: No MX or A records were found for the local domain. If the records are
not configured, incoming mail can fail to be delivered to this server.
Checking remote domain records.
Starting TCP and UDP DNS queries for the remote domain. This test will try to
validate that DNS is set up correctly for outbound mail. This test can fail for
3 reasons.
    1) Firewall blocks TCP/UDP queries which will block outbound mail. Windows
2000/NT Server requires TCP DNS queries. Windows Server 2003 will use UDP
queries first, then fall back to TCP queries.
    2) Internal DNS does not know how to query external domains. You must
either use an external DNS server or configure DNS server to query external
domains.
    3) Remote domain does not exist. Failure is expected.
Checking MX records using TCP: yahoo.com.cn.
Warning: The TCP DNS query returned no results.
Checking MX records using UDP: yahoo.com.cn.
Error: No MX or A records were found for the remote domain. Verify that the
remote domain is valid. Your firewall allows outbound DNS queries (Windows
NT/2000 Server requires TCP), and your DNS server can resolve external domains.


真是百思不得其解。
请高手想想办法..

砸锅卖铁

如果确定你Exchange的DNS没有故障的话，在Exchange上用telnet模拟SMTP通信测试一下

abdxj

如果内部没有问题的话，可能处在isa上

cakerwu

问题已经解决。。。在网内新建一个SMTP服务器。把所有的外部邮件，都交给这台服务器处理。。