Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

--- exch:connectors [2020/09/28 13:49] – angelegt Sebastian Hetzel
+++ exch:connectors [2025/07/04 12:25] (aktuell) – [Bereiche kopieren] Sebastian Hetzel
@@ Zeile 1: / Zeile 1: @@
-====== Exchange: Connectors ======
+====== Exchange: Connectors / Konnektoren ======
-===== Empfangsconnectoren =====
+===== Empfangskonnektoren =====
+==== Anonymes Relay (Powershell) =====
+=== Connector anlegen ===
+<code <powershell>
+New-ReceiveConnector -Name "Client-Relay" -TransportRole FrontendTransport -Custom -Bindings 0.0.0.0:25 -RemoteIpRanges 192.168.100.202
+</code>
+=== Berechtigungen setzen ===
+<code |powershell>
+Set-ReceiveConnector "Client-Relay" -PermissionGroups AnonymousUsers
+</code>
+<code |powershell>
+Get-ReceiveConnector "Client-Relay" | Add-ADPermission -User "NT AUTHORITY\ANONYMOUS LOGON" -ExtendedRights "Ms-Exch-SMTP-Accept-Any-Recipient"
+</code>
+<note important>Sprachversion beachten!</note>
+  * **NT-Autorität\Anonymous-Anmeldung**
+  * **NT AUTHORITY\ANONYMOUS LOGON**
+=== Berechtigungen prüfen ===
+<code |powershell>
+Get-ReceiveConnector "Client-Relay" | Format-List Enabled,TransportRole,Bindings,RemoteIPRanges
+</code>
+<code |powershell>
+Get-ADPermission "Client-Relay" -User "NT AUTHORITY\ANONYMOUS LOGON" | where {($_.Deny -eq $false) -and ($_.IsInherited -eq $false)} | Format-Table User,ExtendedRights,Identity
+</code>
+==== Anonymes Relay (ECP) ====
+Anonymous-Relay erlauben (beliebige Absenderkennung nach extern).
+{{:exch:ex_con_anon_relay_1.png|}}
+{{:exch:ex_con_anon_relay_2.png|}}
+{{:exch:ex_con_anon_relay_3.png|}}
+{{:exch:ex_con_anon_relay_4.png|}}
+<code |powershell>
+Get-ReceiveConnector "Client-Relay" | Add-ADPermission -User "NT AUTHORITY\ANONYMOUS LOGON" -ExtendedRights "Ms-Exch-SMTP-Accept-Any-Recipient"
+</code>
+==== Bereiche kopieren ====
+<code |powershell>
+Set-ReceiveConnector "NEUER_SERVER\NAME_DES_CONNECTORS" -RemoteIPRanges (Get-ReceiveConnector "ALTER_SERVER\NAME_DES_CONNECTORS").RemoteIPRanges
+</code>
+===== Send Connectors =====
+==== Port ändern ====
-Anonymous-Relay erlauben (beliebige Absenderkennung nach extern)
 <code |powershell>
-New-Receiveconnector -Server SERVERNAME -Name "Client-Relay" -RemoteIPRange ("192.168.2.2") -TransportRole "FrontendTransport" -Bindings ("0.0.0.0:25") -Usage "Custom"
+Set-SendConnector -Identity mail.example.com -Port 25
 </code>