Hey guys,

I've got a exchange 2010 edge server which has two send connectors, one that does internet mail flow and the other which does internal to exchange 2013. Also i have a default receive connector. 

Currently i have a spam filter doing unauthenticated SMTP relay to Exchange, i want to cut over to exchange edge server to do SMTP relay. The only issue i can think up is that i have a whitelist of which source IP can send directly to the internet but some devices can relay mail internally due to IT security policy. I've got a small list of source IP address that are not allowed to send external.

1. create two new receive-connectors on the edge server one that is allowed to relay both internal or external and one that can only relay internal?

any ideas or thoughts on this subject?

Regards

Nathan

Are you using Edge Synchronization?

Are you thinking of using native antispam or installing a third-party agent on the Edge server?

Please understand the concept of relay.  Relay means to accept mail for hosts outside the Exchange organization.  Submission means to accept mail for recipients inside your organization.  Enabling the anonymous permission group allows submission; relay requires an extra step.  It's easy and fairly safe to allow any host to submit but not relay.  If you have hosts that need to relay, I would create a separate connector for them.  If you have hosts that need to submit and you don't want to open submission to all hosts, then I would create a separate connector for those hosts.