Configure on-premises email server Receive Connector to relay email

By default, Exchange 2010 does not allow clients to use the SMTP service for anonymous relay, so we need to configure a Receive Connector for this purpose

  1. Logon to on-premises exchange server.
  2. Open the Exchange Management Console.
  3. In the console tree, expand Server Configuration, select Hub Transport, and then in the work pane, click the Receive Connectors tab.
  4. In the action pane, click New Receive Connector. The New Receive Connector wizard starts.
  5. On the Introduction page, type name in the Name field and then select Custom in the Select the intended use for this connector field, click Next.

6. the Local Network settings page, click Next.

7. the Remote Network settings page, Select the existing 0.0.0.0 – 255.255.255.255 entry, and then click .

8. Click Add, and add all Exchange Online Protection IP addresses, click Next.

Americas EMEA APAC
23.103.148.0/22

23.103.156.0/22

23.103.198.0/24

23.103.200.0/22

23.103.212.0/22

40.92.64.0/18

40.93.64.0/18

40.94.64.0/18

40.95.64.0/18

40.107.64.0/18

52.100.64.0/18

52.101.64.0/18

52.102.64.0/18

52.103.64.0/18

65.55.169.0/24

157.56.110.0/23

207.46.100.0/24

207.46.163.0/24

216.32.180.0/23

2a01:111:f400:7d00::/57

2a01:111:f400:7e40::/58

 23.103.132.0/22

23.103.144.0/22

40.92.0.0/18

40.93.0.0/18

40.94.0.0/18

40.95.0.0/18

40.107.0.0/18

52.100.0.0/18

52.101.0.0/18

52.102.0.0/18

52.103.0.0/18

94.245.120.64/27

104.47.0.0/19

157.55.234.0/24

157.56.112.0/24

213.199.154.0/24

213.199.180.128/26

2a01:111:f400:7e00::/58

 23.103.136.0/21

23.103.152.0/22

40.92.128.0/17

40.93.128.0/17

40.94.128.0/17

40.95.128.0/17

40.107.128.0/18

52.100.128.0/17

52.101.128.0/17

52.102.128.0/17

52.103.128.0/17

65.55.88.0/24

104.47.64.0/18

134.170.132.0/24

134.170.140.0/24

207.46.51.64/26

2a01:111:f400:7e80::/57

 

9. On the New Connector page, review the configuration summary for the connector, click New.

10. On the Completion page, click Finish.

11. On the work pane, select the Receive connector that you created.

12. Under the name of the Receive connector in the action pane, click Properties to open the Properties page.

13. Click the Authentication tab, select Transport Layer Security (TLS).

14. Click the Permission Groups tab, select Anonymous users.

15. Click OK to save your changes and exit the Properties page.

16. Open Exchange Management Shell, enter follow command.

Get-ReceiveConnector "Inbound from Office 365" | Add-ADPermission -User "NT AUTHORITY\ANONYMOUS LOGON" -ExtendedRights "Ms-Exch-SMTP-Accept-Any-Recipient"

Change MX record to redirect mail flow from the Internet to Office 365

To redirect email flow to Office 365, change the MX (mail exchange) record for your domain.

Note

If you want to do pilot test before cut over, please keep your MX record and autodiscover settings direct to on-premises Exchange server, but you need to add spf TXT recode as follow format:

v=spf1 mx include:mail.gdm.ca include:spf.protection.outlook.com ~all

mail.gdm.ca =Exchange Server external FQDN

Hope you enjoy this post.

Cary Sun

TWITTER:@SifuSun