
We use Symantec MessageLabs as our security gateway. I was never able to send emails through Exchange before from third-party applications on the network without adding their IP addresses in the appropriate receive connector.

Right now someone from Microsoft is telling me this isn’t relay and is allowed. I’d rather people not be able to send email from applications, printers, etc, without authentication or without being on the list of IP addresses in the connector. I have my default receive connector setup to allow anonymous connections so our org can receive email from gmail, hotmail, etc. Paul, is it by design that Exchange 2010 allows any non-domain user on the network to telnet to the Exchange HUB server, and send an email from any user account to any other user account (local to local, non relay)?

AddressBookPolicy to rewrite outbound address to suffix. Create a new Send Connector to point to a smart host, to a public IP of Edge Server of OWNER.COMĤ. Create receive connector: “Relay for ACQUIRED.NET ”ġ. Configure an accepted domain as an internal relay domain ‘ACQUIRED.NET’ on Edge Server or CAS Server.ģ. in DNS: MX records of ‘ACQUIRED.NET’ Edge Server.Ģ. We need to implement the address rewriting in the ‘ACQUIRED.NET’ forest to change the SMTP domain name ONLY for outbound emails to OWNER.COM shared SMTP domain name suffix.Īlso Helpdesk Application is centralized and need to use MBoxServer in as SMTP-relay to send email messages in both forests.ĭoes these steps should we perform in each forest?ġ. Let’s we name them ‘OWNER.COM’ (Ex2013) and ‘ACQUIRED.NET’ (Ex2013). Even worse, I have found some conflicting information, that I become totally confused. I stuck on solution and can’t find a clear step-by-step instruction on Microsoft site.
#Exchange 2010 smtp relay how to
Thank you for your article! The most clear explained why and how to create relay connector!īut still I don’t understand some relationship in Exchange Your kind assistance is greatly appreciated. I am certain the issue lies with the Permissions/Authentication settings on the Receive Connector configured atEXCHDOMAIN1 to accept email from EXCHDOMAIN2. Users in EXCHDOMAIN1 can send emails to external recipients, however users in EXCHDOMAIN2 cannot, the email is being rejected by the Exchange server at EXCHDOMAIN1 (550 5.7.1 Unable to relay).

I can send emails from an external user to both EXCHDOMAIN1 and EXCHDOMAIN2 recipients, and users in both EXCHDOMAIN1 and EXCHDOMAIN2 can send emails to each other. It also has a Send Connector to route email to EXCHDOMAIN2 and a Receive Connector to accept email from EXCHDOMAIN2 and EXCHDOMAIN2 is configured with its default Send/Receive Connectors. We have an internet facing company that relays access for a back-end company, both companies have independent active directory forest with their own Exchange 2010 servers in their own email domains – let’s call these EXCHDOMAIN1 and EXCHDOMAIN2.ĮXCHDOMAIN1 (internet facing) is configured with EXCHDOMAIN2 as an Accepted Domain, with the Internal Relay Domain option. Very interesting article, it helped with some of my configuration but I have an issue that I would appreciate your guidance on. Select the Authentication Tab and tick the Externally Secured box.Īpply the changes and the Receive Connector is now ready for the server to relay through. Select the Permission Groups tab and tick the Exchange Servers box. Go back to the Exchange Management Console, right-click the newly created Receive Connector and choose properties. The Receive Connector has now been created but is not yet ready to allow the server to relay through it. Click OK to add it and then Next to continue.Ĭlick the New button to complete the wizard. Now click the Add button and enter the IP address of the server you want to allow to relay through the Exchange server. Highlight the default IP range in the remote network settings and click the red X to delete it. Using dedicated IP addresses for each connector is sometimes required if you need to create connectors with different authentication settings, but for a general relay connector it is not necessary to change it. You can leave the local network settings as is, or optionally you can use a dedicated IP address for this connector if one has already been allocated to the server. Give the new connector a name such as “Relay ” and click Next to continue. Select the Hub Transport server you wish to create the new Receive Connector on, and from the Actions pane of the console choose New Receive Connector. Launch the Exchange Management Console and navigate to Server Management, and then Hub Transport. To permit a non-Exchange server to relay mail we can create a new Receive Connector on the Hub Transport server.
