在缺省情況下Anonymous user權(quán)限組有下面的權(quán)限:
Ms-Exch-SMTP-Submit
Ms-Exch-SMTP-Accept-Any-Sender
Ms-Exch-SMTP-Accept-Authoritative-Domain-Sender
This permission allows senders that have e-mail addresses in authoritative domains to establish a session to this Receive connector.
Ms-Exch-Accept-Headers-Routing
要阻止別冒充您的域名向您發(fā)送郵件,可以使用下面的方法來(lái)解決:
方法一:
Exchange 2007-2010如何防止外部連接冒用本域地址向內(nèi)發(fā)郵件?
在缺省情況下Anonymous user權(quán)限組有下面的權(quán)限:
Ms-Exch-SMTP-Submit
Ms-Exch-SMTP-Accept-Any-Sender
Ms-Exch-SMTP-Accept-Authoritative-Domain-Sender
This permission allows senders that have e-mail addresses in authoritative domains to establish a session to this Receive connector.
Ms-Exch-Accept-Headers-Routing
要阻止別冒充域名發(fā)送郵件,可以使用下面的方法來(lái)解決:
方法一:
1. 在Exchange中心傳輸服務(wù)器上,運(yùn)行ADSIEDIT.msc.
2. 瀏覽定位到Configuration->Services->Microsoft Exchange->First Organization->Adminstrative Groups->Exchange Administrative Group ->Servers->server_name->Protocols->SMTP Receive Connector
3. 右擊Default Receive Connector并切換到Security欄,點(diǎn)擊選中Anonymous Logon.
4. 在下面的列表中點(diǎn)擊選中 Accept Authoritative Domain Sender右邊的Deny.
5. 重啟Microsoft Transport services服務(wù).
方法二:
1.在PowerShell下輸入以下命令:
Get-ReceiveConnector "Default SRV12-01" | Get-ADPermission -user "NT AUTHORITY\Anonymous Logon" | where {$_.ExtendedRights -like "ms-exch-smtp-accept-authoritative-domain-sender"} | Remove-ADPermission
2. 重啟Microsoft Transport services服務(wù).
備注:
請(qǐng)將Default SRV12-01替換為您實(shí)際的接受連接器的名稱,注意是端口為25的那個(gè)。
聯(lián)系客服