Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 580
  • Last Modified:

Locking Down Exchange 2010 Receive Connector

I am reviewing the Receive Connectors for a client and wanted to see how best we can lock down.
Environment is a single Exchange Server 2010 with all roles installed. The Default Connector is configured for 10.1.1.0/24 under Network > Receive Mail from ..... If I read this right, they should only have the IP Address of other Servers/Devices that send mail - not the IP Address range for local computers? So it should only list the IP Address of itself?

Please help - they are having issues being blacklisted and I think this may assist in denying client machines from sending mail. Assuming this does not preent client machines from using Outlook to send etc.
0
Flipp
Asked:
Flipp
  • 2
2 Solutions
 
imkotteesSenior Messaging EngineerCommented:
Hi,

As long as "Exchange Servers" are checked under permission groups there wont be any issues for Clients.

Adding IP address for allowing open SMTP relay.
0
 
Simon Butler (Sembee)ConsultantCommented:
The Default receive connector is usually configured to accept email from ALL IP address ranges.

Is this an SBS Server by any chance?
If so, then you would have another connector, which will be for inbound email from external sources. That will be configured to only accept email for everything outside the local subnet.

What you have failed to include in your question is how inbound email currently flows and whether there are any other connectors.

Simon.
0
 
FlippAuthor Commented:
Thanks Simon. Although not a SBS, we do configure in a similar way to what I recall of my SBS days in Exchange. One connector to receive incoming email and open to our incoming mail filter only. The other connector is the one I wanted to get some clarity on to whether we have this configured correctly or not.

I think we have this correct now so thank you for your replies and apologies for delays. :)
0
 
FlippAuthor Commented:
Thank you one and all :)
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now