Exchange 2007, Exchange 2010

Relay Connector

Many times the question comes up in forums how to create a relay connector that works just like it did in Exchange 2003.
At that time it was like…. If the IP address was in the list, that IP was able to relay no matter what.

In Exchange 2007/2010 it’s not working that way..
Now we need to create a receive connector, give it a proper name (like Relay Connector) and also set an extra security setting on it.

Here are the commands that I usually use to create the relay connector

New-ReceiveConnector -Name ‘Relay Connector’ -Usage ‘Custom’ -Bindings ‘*0.0.0.0:25’ -RemoteIPRanges ‘type in the address that should be able to relay’ -Server ‘*Servername’

Get-ReceiveConnector -Identity ‘Relay Connector’ | Add-ADPermission -User “NT AUTHORITY\ANONYMOUS LOGON” -ExtendedRights “ms-Exch-SMTP-Accept-Any-Recipient”

* 0.0.0.0 – If you’re going to use NLB for this relay connector, type in the NLB (VIP) IP address in here, with 0.0.0.0 it will receive mail on all available ip addresses
* Servername – Type in the Exchange HUB server name in here
With this connector the sender doesn’t need to authenticate so it means that no matter what it is that’s going to send mail with the connector, it will work.
Sometimes a server/device can’t authenticate like a SAN etc, then this will be nice to use.

Tagged