Hello, Could you have the users setup their email client at home to authenticate to the email server so that they can send their outgoing email from the Exchange server. Are they using Outlook from home? Even if they are not using Outlook I would think that you could find a mail client that would use POP3/SMTP and allow the user to authenticate with the Exchange server in order to send mail. Of course the mail would be sent using the domain of the Exchange server and this assumes that they have a domain and Exchange account.
As far as a policy is concerned an open relay is never a good idea and your server will just end up on a blacklist if the server remains open for relay. That point should be enough of a reason to justify closing the open relay. Chris Chris Knieriem Potomac Computer Care 920 National Highway Cumberland, MD 21502 301-777-3914 cknier...@pccareonline.com From: Don Andrews [mailto:don.andr...@safeway.com] Sent: Wednesday, April 28, 2010 3:58 PM To: MS-Exchange Admin Issues Subject: [MALWARE FREE]RE: Is an internal open relay allowed? I don't think RFC rules have exceptions for public schools. Seems to me that if the domain they are trying to send from is ok with it (i.e. includes your IP in their SPF record etc.), it's ok - otherwise many receiving domains would not accept the attempted send as your IP was not a valid sender of email for that domain. ________________________________ From: Vandael Tim [mailto:tim.vand...@khlim.be] Sent: Wednesday, April 28, 2010 12:24 PM To: MS-Exchange Admin Issues Subject: Is an internal open relay allowed? Hello all, Any of you guys here that is familiar with the RFC rules for email? Are we as a public school allowed to send mail from other domains? The reason I'm asking it is an internal discussion we have here. We are moving to exchange 2010 and the old open internal relay is going to be shut down in a few months. So we have a lot of users complaining about the fact that they are not being be able to send mail from their home address through our exchange system. Anyone that can point me to the right information about this issue? Thnx! Met vriendelijke groeten, KHLim Katholieke Hogeschool Limburg Associatie KULeuven http://www.khlim.be<http://www.khlim.be/> Tim Vandael ICT Systeembeheerder Campus Diepenbeek, Agoralaan gebouw B, bus 1, 3590 Diepenbeek T +32 11 23 08 94 - F +32 11 23 07 89 - G +32 478 40 52 36 tim.vand...@khlim.be<mailto:tim.vand...@khlim.be> Contact Potomac Computer Care for a SPAM and MALWARE firewall to protect your business email from threats. Contact Potomac Computer Care for a SPAM and MALWARE firewall to protect your business email from threats.
<<inline: image001.gif>>