Link to home
Start Free TrialLog in
Avatar of celoedus
celoedus

asked on

Exchange 2007 - Creating Internal Trusted Relay

I have a copier that can not seem to authenticate when sending mail. It is setup to scan documents and email them to us. Previously I used a Fedora server and made its IP address trusted so it could relay mail. Does exchange have the ability to be an open relay based on ip addresses?
Avatar of Mestha
Mestha
Flag of United Kingdom of Great Britain and Northern Ireland image
Is it emailing external people as well, or just internal people?

Simon.
Avatar of celoedus
celoedus

ASKER

Internal Only.
Avatar of big_daddy0690
big_daddy0690
Flag of United States of America image
You need to add a receive connector to allow this.
 
  1. In the Exchange Management Console expand Server Configuration and select Hub Transport.
  2. Select your exchange server then on the right side click New Receive Connector.
  3. Name your connector for example "Internal Trusted Relay" and select Custom for the connector type. Next
  4. Specify your FQDN for the connector. Next
  5. Remove the default remote IP range and add the IP address(es) or range(s) that you wish to allow relaying.
  6. Next, New, Finish.
  7. Right click the new connector and select Properties.
  8. Configure the options within the Authentication and Permission Groups tabs as appropriate.
Note - If you need to allow Anonymous users to send to external recipients then you will need to manually add that permission with the following command using the Management Shell.

Get-ReceiveConnector Receive Connector Name | Add-ADPermission -User NT AUTHORITY\ANONYMOUS LOGON -ExtendedRights Ms-Exch-SMTP-Accept-Any-Recipient
Avatar of big_daddy0690
big_daddy0690
Flag of United States of America image

Get-ReceiveConnector Receive Connector Name | Add-ADPermission -User NT AUTHORITY\ANONYMOUS LOGON -ExtendedRights Ms-Exch-SMTP-Accept-Any-Recipient

Open in new window

Avatar of Mestha
Mestha
Flag of United Kingdom of Great Britain and Northern Ireland image
If it is internal only then you shouldn't need to do anything. Are you using an Edge server? If not then you should already have anonymous enabled on the receive connector. If you are using an Edge then simply enable anonymous on the Receive Connector.

You shouldn't need to add a new connector, the existing ones will be fine.

Simon.
ASKER CERTIFIED SOLUTION
Avatar of big_daddy0690
big_daddy0690
Flag of United States of America image
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Avatar of Mestha
Mestha
Flag of United Kingdom of Great Britain and Northern Ireland image
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of big_daddy0690
big_daddy0690
Flag of United States of America image
I feel that the question was answered by Mestha and myself. My suggestion would be to split the point between us.

Thanks,
Bob