RE: [ActiveDir] Exchange relay(OT)

[Brian Desmond]

Let me answer what I can authoritatively.   MAPI clients are totally different than pop3/imap. There is no virtual server or none of that. They submit their messages to the server over MAPI just like all their other traffic, and the then server handles the routing internally. You cannot disable mapi users from sending mail. They’re not relaying anything off an SMTP server. If you create an acme.com connector and uncheck the relay box, users will continue to be able to email to acme.com   I’m not sure you understand what relaying means in the context of SMTP. Sending mail to the SMTP server’s native domain is not relaying. It’s what the SMTP server is there for. Submitting mail to the SMTP server for delivery to a remote smtp server is relaying. Usually you don’t think of your internal users sending outbound mail as relaying though I guess technically it is.   A quick peek at the SMTP settings on a couple of the severs here indicates that they all have that allow computers which authenticate to relay box checked. Our outbound SMTP is locked down at the perimeter and inbound comes through a couple of iplanet boxes.     Thanks, Brian Desmond [EMAIL PROTECTED]   c - 312.731.3132     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern Sent: Tuesday, September 20, 2005 9:01 PM To: activedirectory Subject: [ActiveDir] Exchange relay(OT)   I'm confused about relaying on virtual servers and smtp connectors. I keep reading conflicting reports-   In "Microsoft Exchange Server 2003 24seven" from Sybex, JMcBee writes in chapter 14 on page 584 that unchecking "Allow All Computers WHich Sucessfully Authenticate To Relay..", Exchange servers will not be able to send mail to one another. He states Exchange servers relay with each other in an Org all the time and unchecking this will break exchange. Jim McBee has stated this in both Exchange 2k and 2k3 verisons of the book.   However in "Exchange Server Cookbook", recipe 7.19, they state to uncheck this value for security reasons and seem to imply that this is only for pop3/imap clients.   Tony redmond in "MS Exchange Server 2003 with sp1" seems to agree as well. who's right?   Also, I know the setting for relaying on an smtp connector over rides the virtual server connection setting, so say i create a connector with "acme.com" address space. If i uncheck the relay button on the connector, will users(mapi or pop3) be able to send mail to acme.com? or do i have to enable relaying for this to work on that connector?     Finally, how does exchange view mapi users? are they lumped in with auth users like pop3/imap?   what mechanism allows mapi users to relay? is there a setting that can disallow mapi clients from relaying like  for pop3/imap clients?   Thanks. alot of questions, i know. Exchange in some ways confuses the heck outta me. I find the sendmail.cf file easier than exchange sometimes.     Thanks again!