It is required to make relay off for the Exchange Server with the use of Application Server. This situation may come up to the Exchange users when SharePoint is in use. Sending emails from a Server to the desired customers through employees or using CRM applications is also a concern. The high time to make relay off will be when you will get the SMTP error message “550 5.7.1 Unable to relay”.
It is highly recommended to restrict the relay for servers. No matter if it is connected to the internet or not. Restrictions or/and authentications will get used to stop relay via making use of IP address.
To know more about how to configure relay restriction for Exchange 2007, check out above given segments properly.
NT AUTHORITY\Authenticated Users {ms-Exch-SMTP-Submit}
NT AUTHORITY\Authenticated Users {ms-Exch-Accept-Headers-Routing}
NT AUTHORITY\Authenticated Users {ms-Exch-Bypass-Anti-Spam}
NT AUTHORITY\Authenticated Users {ms-Exch-SMTP-Accept-Any-Recipient}
Perform above given two steps in order so that you can prevent to the GUI from being blocked. Be sure that you are performing this process intelligently and effectively. Under the bypass limits of CRM properties you need to apply “Externally Secured” permissions with below mentioned commands:
MS Exchange\Externally Secured Servers {ms-Exch-SMTP-Accept-Authoritative-Domain}
MS Exchange\Externally Secured Servers {ms-Exch-Bypass-Anti-Spam}
MS Exchange\Externally Secured Servers {ms-Exch-Bypass-Message-Size-Limit}
MS Exchange\Externally Secured Servers {ms-Exch-SMTP-Accept-Exch50}
MS Exchange\Externally Secured Servers {ms-Exch-Accept-Headers-Routing}
MS Exchange\Externally Secured Servers {ms-Exch-SMTP-Submit}
MS Exchange\Externally Secured Servers {ms-Exch-SMTP-Accept-Any-Recipient}
MS Exchange\Externally Secured Servers {ms-Exch-SMTP-Accept-Authentication-Flag}
MS Exchange\Externally Secured Servers {ms-Exch-SMTP-Accept-Any-Sender}
It is used for providing most shared and common permissions for the accounts those are created anonymously, but it is not responsible for offering relay permissions. Further commands those will be executed under Exchange Shell are:
Get-ReceiveConnector “CRM Application” | Add-ADPermission -User “NT AUTHORITY\ANONYMOUS LOGON” -ExtendedRights “ms-Exch-SMTP-Accept-Any-Recipient”.
Error 5.7.1 Unable to relay is the most common error faced by users when they try to send mail outside the organization. The main cause of the error is that the Exchange mail server is configured in such a manner that don’t allow users to send messages outside the organization.
To proceed further some time administrator wants to block the spam mails that tries to enter into the Orgnization from Outside. The administrator can easily solve the issue by setting up a new role in the transport layer.