locked
Exchange 2013 Authenticated SMTP Relay RRS feed

  • Question

  • Hello!

    Can anyone point me in the right direction to accomplish Exchange 2013 Authenticated SMTP Relay?

    Thanks in advance!

    Ben

    Wednesday, March 13, 2013 6:34 PM

Answers

  • You could create a Receive connector on the 2013 Mailbox server, and then configure the Receive connector with the following properties:

    • Create/configure a service account for the applications/copier to use.
    • Create a new Receive connector with the Usage value 'Custom', and don't assign any permission groups to the connector.
    • Specify the IP address(es) of the application servers/copiers as the only remote IP addresses that are allowed to use this Receive connector.
    • Use the Add-AdPermission cmdlet to add the ms-Exch-SMTP-Submit permission to the Receive connector for the service account.

    The combination of restricting the IP addresses that the Receive connector listens to, and restricting permissions on the connector so that only the service account can send messages should do the trick.

    For more information, see these topics:

    Add-ADPermission

    Receive Connectors

    Receive Connector Permissions

    • Proposed as answer by Chris Davis - MSFT Monday, March 25, 2013 10:05 PM
    • Marked as answer by cara chen Friday, March 29, 2013 8:08 AM
    Monday, March 25, 2013 10:05 PM

All replies

  • Hello,

    Unlike Exchange 2007/2010, the receive connector isn't configured by default to accept incoming email from the internet, when an exchange 2013 CAS is installed it is pre-configured with a Receive Connector named "Default Frontend <servername> "that allows "Anonymous Users" to connect.

    Here is the article for your reference.

    Confused About Exchange Server 2013 Mail Flow?

    http://exchangeserverpro.com/exchange-2013-mail-flow


    Cara Chen
    TechNet Community Support


    • Edited by cara chen Thursday, March 14, 2013 7:07 AM
    Thursday, March 14, 2013 7:06 AM
  • I need to be able to send email from inside the network from some applications and a few copiers. It's works anonymously but I want to use authentication. I can't get it to work. Any ideas? 
    Thursday, March 14, 2013 12:41 PM
  • You could create a Receive connector on the 2013 Mailbox server, and then configure the Receive connector with the following properties:

    • Create/configure a service account for the applications/copier to use.
    • Create a new Receive connector with the Usage value 'Custom', and don't assign any permission groups to the connector.
    • Specify the IP address(es) of the application servers/copiers as the only remote IP addresses that are allowed to use this Receive connector.
    • Use the Add-AdPermission cmdlet to add the ms-Exch-SMTP-Submit permission to the Receive connector for the service account.

    The combination of restricting the IP addresses that the Receive connector listens to, and restricting permissions on the connector so that only the service account can send messages should do the trick.

    For more information, see these topics:

    Add-ADPermission

    Receive Connectors

    Receive Connector Permissions

    • Proposed as answer by Chris Davis - MSFT Monday, March 25, 2013 10:05 PM
    • Marked as answer by cara chen Friday, March 29, 2013 8:08 AM
    Monday, March 25, 2013 10:05 PM