Solved

Locking Down Exchange 2010 Receive Connector

Posted on 2014-04-10
4
441 Views
Last Modified: 2014-07-22
I am reviewing the Receive Connectors for a client and wanted to see how best we can lock down.
Environment is a single Exchange Server 2010 with all roles installed. The Default Connector is configured for 10.1.1.0/24 under Network > Receive Mail from ..... If I read this right, they should only have the IP Address of other Servers/Devices that send mail - not the IP Address range for local computers? So it should only list the IP Address of itself?

Please help - they are having issues being blacklisted and I think this may assist in denying client machines from sending mail. Assuming this does not preent client machines from using Outlook to send etc.
0
Comment
Question by:Flipp
  • 2
4 Comments
 
LVL 13

Assisted Solution

by:imkottees
imkottees earned 250 total points
Comment Utility
Hi,

As long as "Exchange Servers" are checked under permission groups there wont be any issues for Clients.

Adding IP address for allowing open SMTP relay.
0
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 250 total points
Comment Utility
The Default receive connector is usually configured to accept email from ALL IP address ranges.

Is this an SBS Server by any chance?
If so, then you would have another connector, which will be for inbound email from external sources. That will be configured to only accept email for everything outside the local subnet.

What you have failed to include in your question is how inbound email currently flows and whether there are any other connectors.

Simon.
0
 
LVL 6

Author Comment

by:Flipp
Comment Utility
Thanks Simon. Although not a SBS, we do configure in a similar way to what I recall of my SBS days in Exchange. One connector to receive incoming email and open to our incoming mail filter only. The other connector is the one I wanted to get some clarity on to whether we have this configured correctly or not.

I think we have this correct now so thank you for your replies and apologies for delays. :)
0
 
LVL 6

Author Closing Comment

by:Flipp
Comment Utility
Thank you one and all :)
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Article by: btan
Provide an easy one stop to quickly get the relevant information on common asked question on Ransomware in Expert Exchange.
Never store passwords in plain text or just their hash: it seems a no-brainier, but there are still plenty of people doing that. I present the why and how on this subject, offering my own real life solution that you can implement right away, bringin…
In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now