Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have an install of Exchange 2010 without an Edge Transport Server. The only way I can get it to receive e mail from the internet is by allowing anonymous access to the receive connector but this in turn means the server can be used as a relay. Testing has proved that this is indeed the case.

I've Googled this extensively but can't seem to find any solution, other than installing the Edge Transport role somewhere which unfortunately isn't an option.

I'm hopeful that I'm just missing something obvious - previously I've always used Exchange 2003.

share|improve this question
4  
How exactly did you test this? You should have a Receieve Connector with anonymous access, that's how other email servers will connect to your server to send email TO your server. That doesn't mean that they'll be able to send email THROUGH your server. A Send Connector is what allows email to be sent THROUGH your server. –  joeqwerty Jul 27 '10 at 16:20

2 Answers 2

up vote 2 down vote accepted

See my answer here:
http://serverfault.com/questions/149903/what-ports-to-open-for-mail-server/149904#149904

In order to receive email, you must accept anonymous connections on port 25.

For your connector for port 587, do not allow anonymous connections.

And make sure you NEVER check externally secured unless you know exactly what you are doing. That is how open relays are setup.

share|improve this answer

Allowing anonymous access in the receive connector does not mean it's an open relay. Configuring anonymous access simply means your server will accept a connection without the sending server authenticating. Relay means your server will send email to domains despite your mail system not being authoritative for that domain. So long as you do not specify the sending server can relay, it can only deliver email to the domains your server is configured to be authoritative for. Those are the accepted domains. If it's working otherwise, you configured it incorrectly.

If you are allowing direct internet email to your Hub Transport server, be sure to configure antispam agents on the receiving HT server(s). http://technet.microsoft.com/en-us/library/bb201691.aspx

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.