Orange blocking ports

Does anyone know why Orange appear to be blocking ports from 3rd party email servers

Such as Namesco Authenticated smtp appears to be blocked on 25,2525 and 587

Does anyone know why Orange appear to be blocking ports from 3rd party email servers

usually it is to counter the sending of spam eg by botnets

It is definitely a weird on as Orange only appered to have started the port blocking on thursday and it effects anyone with an authenticated smtp service with 3rd party companies such as Namesco.

587 is an auth only port so thats stupid to block that.

any port can be used for anything, perhaps they have an issue with traffic on that port

Orange doesn't block Authenticated Port 587 to Hotmail, so it wouldn't to Namesco.

It blocks all Port 25s except its own to combat spam.

Post deleted by XRaySpeX

Except that multiple Namesco authenticated smtp customers are reporting that no authenticated traffic is being allowed through their Orange connection.

Also the Namesco Auth logs are reporting authentication failure indicating the the network is stripping the authenticated headers.

Hmmm, several people who I help with their PCs are having problems.

Due to the continual problems with the Orange SMTP server I set them up with their own domains & hosting, thereby giving them their own mail server and addresses.

Result several happy users.

Now it seems Orange have decided to not only block SMTP traffic on port 25 but also 587 (which a lot of 3rd party mail servers use) and FORCE their customers to use their flaky, unreliable SMTP server.

I can't change the mail servers' port so not sure how I am going to get those users happy again.

In reply to a post by mjrproductions:

Hmmm, several people who I help with their PCs are having problems.

Due to the continual problems with the Orange SMTP server I set them up with their own domains & hosting, thereby giving them their own mail server and addresses.

Result several happy users.

Now it seems Orange have decided to not only block SMTP traffic on port 25 but also 587 (which a lot of 3rd party mail servers use) and FORCE their customers to use their flaky, unreliable SMTP server.

I can't change the mail servers' port so not sure how I am going to get those users happy again.

Sounds like a detrimental change to T & Cs to me if it isn't very short-term.

the network is stripping the authenticated headers.

so it's authenticated but plain text rather than using encrypted ?

Gmail uses SSL on port 465 may offer a workaround
http://mail.google.com/support/bin/answer.py?hl=en&a...

In reply to a post by RobertoS:

Sounds like a detrimental change to T & Cs to me if it isn't very short-term.

This is in the "Help" pages.

http://help.orange.co.uk/orangeuk/support/personal/2...

Seems to say you MUST use their SMTP server

In reply to a post by mjrproductions:

In reply to a post by RobertoS:

Sounds like a detrimental change to T & Cs to me if it isn't very short-term.

This is in the "Help" pages.

http://help.orange.co.uk/orangeuk/support/personal/2...

Seems to say you MUST use their SMTP server

Well yes, in a way. That is certainly what it says.

The question is how long has it said that? If that is new, then a de facto detrimental change. If it has always said that and they just didn't implement it, then I doubt if there is any comeback available.

You can of course make the emails appear to be from the required server on casual inspection by setting both the return address and the email address to the domain ones. Only lookig at the header will show the Orange origination.

I don't expect that is unacceptable, but if the Orange SMTP server(s) are indeed flaky then that's a totally different matter.

What a load of codswallop is spoken here.

Orange has always blocked foreign port 25s, just like most ISPs. It doesn't prevent authenticated SMTP on other ports. I have just used ports 26, 465 & 587 successfully (EDIT: With non-Orange email addys, so that's not a hindrance.).

Orange's SMTP 25 server is rarely flaky; about 3 years since I last had brief trouble with it.

Edited by XRaySpeX (Mon 31-Jan-11 21:23:11)

In reply to a post by mjrproductions:

Seems to say you MUST use their SMTP server

Yes, that's true and always has been.

You can only read it remembering that port 25 is the only official designated SMTP port. All these other ports are unofficial quasi "SMTP" ports.

Orange used to block port 25 claiming this was to reduce spam being sent by users connected via their broadband service. This inconvenienced me because I like to use telnet to check if smtp servers are working for my clients. They also limited email recipients to 15, a nightmare for me because I run a number of social groups with 100+ members. My work around for Outlook was to use a gmail account for sending mail via port 465. Around a year ago I noticed that the port was no longer blocked. Last Thursday with no warning or notice from Orange it was blocked again, even their own support people claim it has always been so. The recipient limit seems to be set at 22 now. I've no objection to Orange setting their system up the way they like, I just think it would be nice to tell their customers, AND future possible customers, that these limits are in place before they sign them up. I've read their T&O and there is no mention of these limitations, when I queried this with Orange I eventually got the reply (after nine months!) that it was covered under the "fair use policy".

In reply to a post by XRaySpeX:

What a load of codswallop is spoken here.

Orange has always blocked foreign port 25s, just like most ISPs. It doesn't prevent authenticated SMTP on other ports. I have just used ports 26, 465 & 587 successfully (EDIT: With non-Orange email addys, so that's not a hindrance.).

Orange's SMTP 25 server is rarely flaky; about 3 years since I last had brief trouble with it.

Well I suggest you do some searching (Twitter, Google) they ARE blocking authenticated 587!

http://search.twitter.com/search?q=orange+587
http://search.twitter.com/search?q=orange+smtp

When you say "I have just used ports 26, 465 & 587 " do you mean right now, while using an Orange BB line? Or do you mean in the past? I've got several people I support who have their own domain/email address and had been using authenticated 587 up until this Friday gone ......... no longer

As for Orange SMTP server not being flaky, it is up and down at a change in the wind. This combined with lots of other ISPs regularly blocking email from Orange addresses makes it totally unreliable!

Edited by deleted (Mon 31-Jan-11 21:51:49)

What mail server? On what server OS?

It may be a simple case of telling the mail server to listen on multiple ports, or it may require you to map other ports to port 25 (or port 465 for ssl smtp) to allow the mail server to see traffic it would not otherwise see.

Actually.. Orange (on BT-based services) appear to be sending a TCP reset when it sees SMTP-like traffic on any port that is not destined for their servers.

If your SMTP provider supports secure SMTP, normally on port 465 (sometimes on 25), this should "work around" the problem.

Matt

In reply to a post by mjrproductions:

When you say "I have just used ports 26, 465 & 587 " do you mean right now, while using an Orange BB line? Or do you mean in the past?

I've always understood "just" to mean "right now"! And again in the last 30 secs.

Explain to me how I can successfully use Hotmail's port 587 SMTP from Orange whilst others say they can't use someone else's 587? The common culprit here seems to be Namesco not Orange.

Or supply me with another mail provider's account details (one time only) so I can test from here.

I'm on LLU. As uno has just pointed out there could be different behaviour on Orange IPStream. Are you on Orange IPStream? That might account for all your adverse comments. I can't, and wont, speak for that, but they have never applied to Orange LLU.

I'm on LLU.

that's probably the difference.

In reply to a post by yarwell:

I'm on LLU.

that's probably the difference.

I have also been wondering about dynamic v static IP addresses?

Orange are also blocking one.com SMTP servers. Anyone have an idea how to resolve this as one.com don't seem to have an answer

Hi,

I have two different email accounts from two different providers to allow me to send/receive email wherever I'm connected.

BOTH have ben failing to send since Thursday - 0x800ccc0f every time.

One uses 2525, the other uses 587.

Neither provider has any answer as Orange now seem to be blocking all 3rd party email providers...

So, do I rant at 'Suresh' in Bangalore again or do I move to Virgin/BT/Other who are not blocking my emails?

I'm another Orange customer that has been having these problems accessing my Fasthosts SMTP server since Thursday. Now (within the last hour) , even when using the Orange SMTP server, my emails don't seem to be reaching their destination!

Dear all

I'm a visitor here. Not an IT guy, but someone who suffered the same problem via 123-reg.co.uk

after much phoning around, I eventually spoke ot a human being who works as a service rpovider to orange.

Port 587, and all other commonly used SMTP ports have been blocked by Orange and there is no plan to unblock them.
This is action by Orange to reduce outgoing spam mail and to secure down their system, as far as the person I spoke to is aware, and I have had several problems in the past via orange, which he has worked on and resolved quickly for me, there is no real workaround.

Its not down to different email providers, it is Orange, no-one else.

the answer is clear - use SMTP.orange or change you ISP provider.

Bob

Strange - I just spent 20 mins on the phone to Orange suppport who INSISTED that the problem was still being investigated and that they were definately NOT blocking any ports! Somehow, I'm not convinced. [censored] - elbow, anyone?

None of you have stated whether you are on LLU or non-LLU (IPStream)?

What you say has not and has never happened to me on LLU.

In reply to a post by chugster:

Strange - I just spent 20 mins on the phone to Orange suppport who INSISTED that the problem was still being investigated and that they were definately NOT blocking any ports! Somehow, I'm not convinced. [censored] - elbow, anyone?

I have intimate knowledge of Orange support ( at one point to solve a problme they felt it necessary to close my account, meaning I lost service for 2 weeks whilst they opened a new account!) and they are devinitely the @rse as opposed to the elbpw...

In reply to a post by XRaySpeX:

None of you have stated whether you are on LLU or non-LLU (IPStream)?

What you say has not and has never happened to me on LLU.

i'm on LLU

just received this from orange support:

Regarding port 587, we are currently aware of an issue where some
customers are experiencing problems connecting to SMTP outgoing mail
servers. Our technicians are currently looking into this as a matter of
urgency, however, we?re currently unable to advise when this will be
resolved.

left hand - right hand.....

We've just sorted out a mail sending issue for a friend on am Orange 8 meg package, seems that during the last few days a change has happened on those accounts at least, as prior to last weekend it was sending fine on the Hostgator server but now it seems we have taken a step backwards - from her mail being sent via a server REQUIRING authentication, she is now restricted to SMTP.Orangehome.co.uk which requires NO authentication as per THIS ITEM *facepalm"



We have her on our hosing so that amongst other things,we can easily assist her with mail issues - no foreign script shops being involved. It really is a joke to be forced to use an insecure server this way. I really don't see how forcing people to send mail through a server that is insecure through lack of authentication is a step forward. I think we will be moving her to a proper ISP when her contract is up. this bunch of jokers are not worth bothering with. I would have thought that the Spam problem is in part fueled by servers that DONT require authentication!

ISPs traditionally don't use authentication on their own servers as they're only accessible from within and they know your IP address.

SSL might be worthwhile, but most authenticated mail servers seem to do so with plain text authentication which is somewhat insecure anyway.

For example one ISPs instructions say " Please make sure that "Log on using Secure Password Authentication" is not checked."

Do you actually mean "Insecure Orange SMTP server now required on 8 meg non-LLU lines"?

There will remain legacy 8 Meg LLU customers around, to which your findings do not apply.

Im sure most people here less will understand my meaning.

For those of us left out of all this investment it fades into insignificance

It seems they all beat their gums about security but in reality they are not that committed to the cause. I know both Enta and (at least in the past) Pipex used simple password authentication. Given the number of people communicating "mobile", you would think that by now they would be using a properly secure method of logging in and avoid this childish walled garden port blocking stuff.

In reply to a post by warweezil:

it fades into insignificance

and away from factually.

My sources suggest that the restriction which blocked SMTP on any port, as opposed to just blocking port 25, was not deliberately introduced and the cause has now been identified and resolved.

That makes sense!

You could try one of two things (both of which have worked for me)

1. Use Port 366 as an alternative. This worked for me today but for some reason didn't work a few days ago.

2. Use an SSL connection to Port 465. This has been working for me with no problems for about a year.

Which would explain why 366 is suddenly working for me after I tested it about an hour ago

Hi, what�s all this port jigerypokery?
I use the Orange SMTP mail server with Outlook Express as I did for Free-online, E7even, Tiscali and Plusnet. It must be secure when you have to input your email address and the password to access your mail, as you do for (check email) on the Orange website home page.

http://www.orange.co.uk

In reply to a post by E7er:

It must be secure when you have to input your email address and the password to access your mail,

You don't for SMTP outgoing. They are only entered for POP3 incoming. The only check is that the SMTP being used is that of your ISP.

Eastbourne IT offer an SMTP-only mail account which can use a non-standard TCP port (i.e. not 25) in order to get around the ridiculous restrictions Orange insist on.

More information: Having Trouble Sending Email Using Orange Broadband?

What a load of codswallop!

Orange are no different from many other ISPs, like O2, Be, AOL & TT, in blocking all other providers' port 25 SMTP. So why single them out?