Configure Internet Mail Flow Directly Through a Hub Transport Server
Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2
Topic Last Modified: 2012-07-23
You can use the EMC or the Shell to configure an Internet-facing Hub Transport server. To establish Internet mail flow directly through a Hub Transport server, you create a Send connector that routes e-mail to the Internet. Also, you modify the configuration of the default Receive connector to accept e-mail from the Internet. In this scenario, the Microsoft Exchange Server 2010 Hub Transport server can be reached directly through the Internet. We don't recommend this topology because it increases security risks by exposing to the Internet the Exchange 2010 server and all roles installed on that server. We recommend that you implement a perimeter network-based SMTP gateway, such as the Edge Transport server, instead.
If you decide to configure Internet mail flow directly through your Hub Transport server, you may want to install the anti-spam agents on your Hub Transport servers. For more information, see Enable Anti-Spam Functionality on a Hub Transport Server.
Looking for other management tasks related to managing message routing? Check out Managing Message Routing.
Register MX resource records for all accepted domains in a public domain name system (DNS) server. Consult the documentation of your DNS provider for information about how to register MX records for your domain. Detailed procedures about how to complete this step are outside the scope of this topic.
Configure network gateways to allow SMTP traffic to and from the Hub Transport server. Consult the documentation for your network routers and firewalls for information about how to route SMTP traffic to and from the Hub Transport server. Detailed procedures about how to complete this step are outside the scope of this topic.
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Send connectors" entry in the Transport Permissions topic.
Expand Organization Configuration, click Hub Transport, and then in the action pane, click New Send connector.
On the New Send Connector wizard Introduction page, in the Name field, type a unique name for the connector. From the Select the intended use for this Send connector drop-down list, select Internet, and then click Next.
On the Address space page, click Add. In the SMTP Address Space dialog box, type "*" in the Address field, and then click OK. Click Next.
On the Network settings page, select Use Domain Name System (DNS) to route mail automatically. Select the Use External DNS Lookup settings check box. Click Next.
Note: For more information about how to configure external DNS lookup settings, see Configure Hub Transport Server Properties.
On the Source Server page, click Add. In the Select Hub Transport and subscribed Edge Transport servers dialog box, select one or more Hub Transport servers in your organization, click OK, and then click Next.
On the New Connector page, click New, and then on the Completion page, click Finish.
This example creates a Send connector that's used by the Hub Transport server HubA to send e-mail to the Internet.
New-SendConnector -Name "Internet" -Usage Internet -AddressSpaces "*" -SourceTransportServers "HubA" -DNSRoutingEnabled:$true -UseExternalDNSServersEnabled:$true
For detailed syntax and parameter information, see New-SendConnector.
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Receive connectors" entry in the Transport Permissions topic.
Expand Server Configuration, click Hub Transport, and in the work pane under the Receive Connectors tab, select the Default <Server Name> connector. In the action pane, click Properties.
In <Connector> Properties, select the Permissions tab.
Select Anonymous Users to add anonymous permissions. Click OK.
This example modifies the default Receive connector on the Hub Transport server HubA to allow anonymous connections.
Set-ReceiveConnector "HubA\Default HubA" -PermissionGroups AnonymousUsers,ExchangeUsers,ExchangeServers,ExchangeLegacyServers
For detailed syntax and parameter information, see Set-ReceiveConnector.