Solved

how to prevent telnet spoofing of internet email addresses with Exchange 2010

Posted on 2014-02-19
4
2,902 Views
1 Endorsement
Last Modified: 2014-02-19
is there a way to prevent someone from telnet to my exchange server on port 25 and sending an email from user1-that-exist@mydomain.com to user2-that-exist@mydomain.com?

everything I've read so far doesn't really stop this. any suggestions?

Thanks
1
Comment
Question by:stevebishop
  • 2
  • 2
4 Comments
 
LVL 37

Accepted Solution

by:
Jamie McKillop earned 500 total points
ID: 39870623
Hello,

You can follow the instructions in this article to prevent domain spoofing of your internal domains:

http://exchangepedia.com/2008/09/how-to-prevent-annoying-spam-from-your-own-domain.html

-JJ
1
 

Author Comment

by:stevebishop
ID: 39870945
JJ,

Thanks for the response, what would be the opposite of that command in case I needed to revert the change?

Get-ReceiveConnector “My Internet ReceiveConnector” | Get-ADPermission -user “NT AUTHORITY\Anonymous Logon” | where {$_.ExtendedRights -like “ms-exch-smtp-accept-authoritative-domain-sender”} | Remove-ADPermission


Would it be

Get-ReceiveConnector “My Internet ReceiveConnector” | Get-ADPermission -user “NT AUTHORITY\Anonymous Logon” | where {$_.ExtendedRights -like “ms-exch-smtp-accept-authoritative-domain-sender”} | Add-ADPermission

?

Thanks
0
 
LVL 37

Expert Comment

by:Jamie McKillop
ID: 39870952
You would run this command to revert back:

Get-ReceiveConnector “Name of your RCV connector” | Add-ADPermission -User “NT AUTHORITY\Anonymous Logon” -ExtendedRights “ms-Exch-SMTP-Accept-Authoritative-Domain-Sender”

-JJ
1
 

Author Comment

by:stevebishop
ID: 39871444
Thanks JJ,

Implemented the change, tested it and i'm not allow to do it anymore. Looks like its working!

Sbishop
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
In this video we show how to create a User Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Mailb…
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now