Connection to external mail server out of DMZ

[Former Member]

Hi Friends,

We have requirement to send mails from SAP but our mail server is on different IP network which is out of DMZ as below:

(Mail server) -> (DMZ) -> (FW) -> (SAP Router) -> (SAP servers)

                                                        |

                                                        |-> (LAN)

* Please note that all above networks seperated by  "->" are on different network even our LAN which uses saprouter to connect to SAP systems but they are able to send/receive mails from our mail server.

As per SAP documentation the mail sending process uses RFC communication with SMTP server to send out mails which uses 33## port no so based on this statement we have maintaned our saprouttab file and services file but no luck.

So my question here is

1) Is SAP router have any role in SCOT config to connect to mail server in such scenario ?

2) Do we need to create manual RFC to connect to SMTP server ?

3) Is there any way to reach to mail server from our SAP system using SAP router without disturbing our firewall settings ?

We have done below config as of now :

1) SCOT configuration from SAP side done

2) SAPRouttab maintened entries like ->

     P sapserverhost mailserverhost 25

     P sapserverhost mailserverhost 3300

     P sapserverhost mailserverhost 3325

3) Also tried to telnet from sap and mailserver on port 25 but failed

4) Telnet from mailserver to saprouter and saprouter to mailserver is working fine

Thanks for giving your time and reading this post.

Thanks,

Shaikhs

[Former Member]

Which version of SAP are you using? Can you share the link to the documentation where it is said that RFC is used to communicate with the SMTP server? This is the first time I hear of it.

Usually e-mails are sent from SAP to the defined MTA in transaction SCOT (node SMTP). SAP acts as a client to the MTA. In transaction SCOT you will use the standard SMTP port of your MTA which is 25. Test that you can telnet from your SAP server to your MTA. If security is a concern, you can send e-mails securily. See the attached link for details. If you are looking at receiving e-mails to SAP, you will have to configure the ICM server node for processing incoming SMTP. In that scenario SAP acts as a server to the MTA.

http://help.sap.com/saphelp_nw73ehp1/helpdata/en/4a/25775009071d0fe10000000a42189c/frameset.htm