Allowing application servers to relay emails
When you deploy Exchange 2016, you may be required to allow applications or physical devices, such as printers, to relay mail off of your servers. In order to allow these systems to anonymously relay mail, you should configure a dedicated receive connector on your Mailbox servers to support this. Although the Default Frontend <Server Name>
receive connector accepts anonymous emails from any IP address on port 25
by default, this connector should be locked down to your inbound mail relay service or devices only.
In this recipe, we'll take a look at how you can create a dedicated receive connector for this purpose using the Exchange Management Shell.
How to do it...
When implementing an unauthenticated relay, it is wise to use a dedicated receive connector for this purpose:
New-ReceiveConnector -Name Relay `-Usage Custom `-Bindings '192.168.1.245:25' `-Fqdn mail.contoso.com `-RemoteIPRanges 192.168.1.110 `-Server EX1 `-PermissionGroups ExchangeServers...