Exchange 2007 - Creating Internal Trusted Relay

Posted on 2009-04-07
Last Modified: 2012-05-06
I have a copier that can not seem to authenticate when sending mail. It is setup to scan documents and email them to us. Previously I used a Fedora server and made its IP address trusted so it could relay mail. Does exchange have the ability to be an open relay based on ip addresses?
Question by:celoedus
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
LVL 65

Expert Comment

ID: 24089267
Is it emailing external people as well, or just internal people?


Author Comment

ID: 24091407
Internal Only.

Expert Comment

ID: 24091867
You need to add a receive connector to allow this.
  1. In the Exchange Management Console expand Server Configuration and select Hub Transport.
  2. Select your exchange server then on the right side click New Receive Connector.
  3. Name your connector for example "Internal Trusted Relay" and select Custom for the connector type. Next
  4. Specify your FQDN for the connector. Next
  5. Remove the default remote IP range and add the IP address(es) or range(s) that you wish to allow relaying.
  6. Next, New, Finish.
  7. Right click the new connector and select Properties.
  8. Configure the options within the Authentication and Permission Groups tabs as appropriate.
Note - If you need to allow Anonymous users to send to external recipients then you will need to manually add that permission with the following command using the Management Shell.

Get-ReceiveConnector Receive Connector Name | Add-ADPermission -User NT AUTHORITY\ANONYMOUS LOGON -ExtendedRights Ms-Exch-SMTP-Accept-Any-Recipient
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.


Expert Comment

ID: 24091886

Get-ReceiveConnector Receive Connector Name | Add-ADPermission -User NT AUTHORITY\ANONYMOUS LOGON -ExtendedRights Ms-Exch-SMTP-Accept-Any-Recipient

Open in new window

LVL 65

Expert Comment

ID: 24092629
If it is internal only then you shouldn't need to do anything. Are you using an Edge server? If not then you should already have anonymous enabled on the receive connector. If you are using an Edge then simply enable anonymous on the Receive Connector.

You shouldn't need to add a new connector, the existing ones will be fine.


Accepted Solution

big_daddy0690 earned 250 total points
ID: 24101300
That was not the case when I was setting up my Exchange 2007 server. I have all roles installed on the same server and it would not accept mail from anything other then Outlook Clients and our Exchange 2003 server.

Currently I have two connectors. One for Outlook clients connecting on port 587 and one for internal relay.
LVL 65

Assisted Solution

Mestha earned 250 total points
ID: 24101447
By default the connectors are configured in that way, because Microsoft is expecting everyone to have an Edge server. All you need to do is enable anonymous on the Connector for port 25.


Expert Comment

ID: 25559011
I feel that the question was answered by Mestha and myself. My suggestion would be to split the point between us.


Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will help to fix the below errors for MS Exchange Server 2013 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
If you troubleshoot Outlook for clients, you may want to know a bit more about the OST file before doing your next job. IMAP can cause a lot of drama if removed in the accounts without backing up.
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
how to add IIS SMTP to handle application/Scanner relays into office 365.

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question