Hi, I have been using a 3rd party pop provider (ipower) and the SBS2008 pop3 connector to bring in the mail so far. Our domain has a MX record (named @.) pointing to "30 mx.mydomain.com" and there are two A records named MX. that point to ipower servers. I also have an "A" record for our server created which points "myserver.mydomain.com" to our public wan ip address. I am signed up for dyndns mailhop relay and have it configured to forward to port 25 at "myserver.mydomain.com". The Mailhop status page suggests that I need to change the two A records named MX to point to them (10 mx1.mailhop.org & 20 mx2.mailhop.org) so they will start receiving mail, and I can do this. But my questions are first: 1. I presume I need to open port 25 TCP in my router and forward it to my exchange server. 2. How can I *test* to make sure everything is going to work before I change the records? Is there any Exchange 2007 configuration I need to check to make sure it can receive from mailhop? Can I do a telnet session trying to send a test message and see if exchange accepts it? 3. Should I restrict mail delivery to only mailhop somehow (in exchange or via firewall rule)? Obviously my largest concern is a mail outage during the transfer and this is what I want to avoid. I also remember doing a self signed certificate when setting of Exchange2007/SBS2008. Current I get an error with OL2007 clients that says "Security Alert" autodiscover.mydomain.com, the first two items are checked but the last one of "the name on the security certificate is invalid or does not match the name of the site" has an X by it. How will this issue change when I switch to mailhop/direct email delivery? Thanks, Alan

Do you not have a static IP at your office? I have no idea how dyndns and mailhop works. This is off the beaten path and i'd avoid it if you can. Yes, you'll need port 25 open from the internet to your SBS server. Also you'll need to adjust the receive connector on your SBS server to allow anonymous connections. Again, I dont know what mailhop is, but if its where your mail is routed from - yes only allow them to connect to port 25. You may also want to investigate some anti-spam options since the POP provider was likely doing this for you previously. The autodiscover cert has nothing to do with mail flow. Please open a new thread for that. Mike Crowley Check out My Blog!