2013 SP1  -separate servers for MBX and CAS - 4 of each. Exchange 2007 configured as a CCR

I am in co-existence mode but have not yet switched on the legacy.domainname.com. I have a new certificate installed on all servers - 2007 and 2013 with the legacy namespace included

I can receive on the exchange 2013 servers and can send to exchange 2013 users but cannot send to 2007 users or externally. I have enabled protocol logging and I'm seeing:

2014-04-02T00:57:31.476Z,Outbound Primary,08D1120CF8FEEDBA,0,,10.0.9.1:25,*,,attempting to connect
2014-04-02T00:57:52.521Z,Outbound Primary,08D1120CF8FEEDBA,1,,10.0.9.1:25,*,,"Failed to connect. Winsock error code: 10060, Win32 error code: 10060, Error Message: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 10.0.9.1:25"

The client has a pair of Axway mailgateway appliances (Tumbleweed). We can Telnet between the exchange 2013 servers and the Axways. There is a firewall between these mail gateways and the exchange servers and the following ports were opened - 25,443,465,995,110

I used the existing send connectors from 2007 and just added the mailbox servers to them. I created 2 new receive connectors to match 2 specialist 2007 connectors.

But I still can't send mail. Any suggestions where next to check?

• Edited by tonyholdgate 9 hours 49 minutes ago

Found it.

Yes I'd done all those tests but

1. The web mail gateways were set to only talk to the CAS servers . This client insisted on splitting the roles. I had to tick the proxy through CAS box. Another good reason not to split roles

2. The Exchange 2007 servers were set to only receive mail from specific IP's *&^%!!. They did not accept exchange server authentication. :-0

Moral of the saga- use multi role servers for 2013 and vanilla setting wherever possible. And don't put a firewall between your mail servers and the gateway

• Marked as answer by tonyholdgate 5 hours 30 minutes ago