Re: SMTP Relay

From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 03/20/05


Date: Sun, 20 Mar 2005 10:18:21 -0500

Tarran wrote:
> Hi Lanwench,
>
> Thanks for your reply. Is there a way to autenticate a user without
> knowing there IP address?

It's either/or - either you permit the IP address to relay, or the user
authenticates using his/her username/pw. Depends what you allow in your
relay properties.
>
> Some of our users travel around very frequently and use internet
> connections from hotels or airports and we don't know there public IP
> address.

Gotcha.
>
> Most users just use OWA but a single user in all cases use POP3 and
> SMTP.

Another, better way might be to have the user connect using VPN or RPC over
HTTP so they don't need to use POP or IMAP at all - if they must absolutely
use POP, let them authenticate. I'm not in front of a server right now but I
believe you can allow only specific users to relay. Might be a a good way to
lock this down a bit.

>
> This was setup on our previous version of exchange 2k; I've tried to
> copy
> our previous setup from exchnage 2k to exchange 2k3 and It still
> doesn't work.
>
> I can't seem to get this to work. Do you know of any good tutorials
> on doing this?

What have you tried?
As I said, I don't think POP is suitable unless this is a user who never
comes into the office/uses OWA/connects directly to his/her mailbox.

>
> Many Thanks,
> Tarran
>
> "Lanwench [MVP - Exchange]" wrote:
>
>> Tarran wrote:
>>> Hi All,
>>>
>>> Does anyone one know of a tutorial for allowing certain external
>>> users to use exchange as their smtp relay server.
>>>
>>> Many Thanks,
>>> Tarran
>>
>> Well, if you know the public IP they'll be connecting from, you can
>> permit that IP to relay. If they have mailboxes on your server, you
>> can allow them to authenticate.
>> Personally, I'd just tell POP users to use their own SMTP server,
>> and if these are users with mailboxes on your server, have them use
>> OWA. I prefer not to open up any relay - even permitting
>> authenticated relay can leave you open to someone exploiting it and
>> using your server to send out spam.



Relevant Pages

  • Re: Relay Blues, #5.7.1 smtp;550 5.7.1 Unable to relay, But I need to
    ... > from your SBS2 server. ... > Based on my research you should set up the SBS 2 server to relay the email ... > that do not authenticate to be able to send mail. ... regardless of the list above is selected. ...
    (microsoft.public.windows.server.sbs)
  • Re: Is my server hijacked or is it spammed
    ... Only authenticated hosts can relay through our server, ... would seem the spammer actually managed to authenticate. ...
    (microsoft.public.exchange.admin)
  • Re: open relay
    ... for any connections accept authenticated ... Right click Default SMTP Virtual Server then Click Properties. ... Click the Access tab Click the relay button, ... Also ensure that "Allow all computers which successfully authenticate to ...
    (microsoft.public.exchange.admin)
  • MS Exchange Relay Authentication
    ... Relay restrictions are set to "allow all computers which successfully ... crash the server more often than not. ... spammer can successfully authenticate and voila, ... With a growth rate exceeding 110%, the TICSA security practitioner certification is one of the hottest IT credentials available. ...
    (NT-Bugtraq)
  • Re: Is my server hijacked or is it spammed
    ... statically enter relay hosts. ... Only authenticated hosts can relay through our server, ... would seem the spammer actually managed to authenticate. ...
    (microsoft.public.exchange.admin)