Troubleshooting Lab

A junk e-mail sender is using your organization to relay unsolicited commercial e-mail. You need to restrict relaying and allow relaying permission only to security groups that contain users of IMAP4 or POP3 clients.

The lab requires that you have a global security group called IMAP4users and one called POP3users. You also need to have a test network that is set up as described in the "Before You Begin" section at the start of this chapter.

To do this, proceed as follows:

1. Open Exchange System Manager.

2. Navigate to Organizational Groups\First Organizational Group\Servers\Server01\ Protocols\SMTP, right-click Default SMTP Virtual Server and then click Properties.

3. On the Access tab, in the Relay Restrictions pane, click Relay.

4. Ensure that the Allow All Computers Which Successfully Authenticate To Relay Regardless Of The List Above check box is cleared. Having this box checked is almost certainly the cause of your problem.

5. Click Users.

6. Remove any users or groups that should not be allowed to submit or relay mail through the server. Allowing these permissions to groups that should not have them could also be contributing to your problem.

   Note

   You should remove a group rather than checking Deny beside a permission. If you deny Submit or Relay Permissions to, for example, Authenticated Users, then allowing them for other groups will not be effective.

7. Click Add, and type POP3users in the Enter The Object Names To Select box. Click Check Names to confirm the group exists, and then click OK.

8. Click Add, and type IMAP4users in the Enter The Object Names To Select box. Click Check Names to confirm the group exists, and then click OK.

   Tip

   Click the Examples link to view the acceptable formats for your entries, as shown in Figure 10-13.

   
   Figure 10-13: Displaying valid entry formats

9. In the Permissions For Submit And Relay dialog box, grant Relay Permission to POP3users and to IMAP4users.

10. In the Permissions For Submit And Relay dialog box, grant Submit Permission to POP3users and to IMAP4users.

    Note

    You must allow Submit Permissions if you want to allow Relay Permissions.

11. Click OK.

12. Click OK again to close the Relay Restrictions dialog box. Click OK again to close the SMTP_server1 Properties dialog box.