Relay in Exchange 2007

Submitted by TawfeeqA on Fri, 06/26/2009 - 18:29

In Exchange 2003, I was able to create an SMTP open relay that could be used only by authenticated users. The authenticated user could send with any From and any To. Without going into the details why (it's not for spamming), I want to do this with Exchange 2007.

I've seen the article on creating an open relay that does not require authentication and that works, but it is not the same as outlined above.

I want this relay to do the following:

- Allow relays from anywhere

- Require authentication to do the relay

- Allow a relay from another Exchange user other than the user that authenticated to anyone

- Allow a relay from anyone to an internal recipient

Forums:

Exchange 2007

Submitted by Ayman Abu Qutriyah on Fri, 06/26/2009 - 18:33

Receive Connector Permissions

Dear,
Exchange 2007 permissions are very specific.

To allow anyone to send to anyone inside the domain you need the user to authenticate-thats it.

To allow anyone "not authenticated users" to send to anyone inside or outside the organization need to grant the a group " NT Authority\Anonymous logon" accept-any-Recipient

This can be done as follows
Get-ReceiveConnector -Identity "Server_Name\Rcv_Connector_Name" | Add-ADPermission -User "NT Authority\Anonymous logon" -AccessRights ms-Exch-SMTP-Accept-Any-Recipient
This will let any user "un-authenticated" to send to inside and outside , of course we are talking about users who are using SMTP programs or applications that uses SMTP directly "not MAPI clients"

To allow any user to send on behalf of anothor user you need to grant that user ms-Exch-SMTP-Accept-Any-Sender
Like the following
Get-ReceiveConnector -Identity "Server_Name\Rcv_Connector_Name" | Add-ADPermission -User "Domain\Spoof_Group" -AccessRights ms-Exch-SMTP-Accept-Any-Sender
I hope this answers you

Ayman Abu Qutriyah

—

Ayman Abu Qutriyah

Submitted by Yun Trapp on Thu, 07/12/2012 - 11:21