The steps for configuring a Windows Server 2008 SMTP relay for Office 365 are:
- Add the SMTP Server feature. (Start->Administrative Tools->Server Manager->Features->Add Features->SMTP Server). The Add features wizard bring up the Select Role Services for the Web Server (IIS) role. Select the IIS Management Console role service. You’ll need this for step 2. In some older versions of Windows Server the SMTP Server function is included with the Web Server (IIS) role. For that case, make sure to include the IIS Management Console and IIS 6 Management Console features.
- If this server doesn’t have a certificate already installed, you will need to install one. Office 365 requires TLS encryption and for this server to use TLS, it must have a certificate installed. To create the self-signed certificate: (Start->Administrative Tools->Internet Information Services (IIS) Manager->Select Host->Server Certificates->Create Self-Signed Certificate)
- Enable SMTP Server. (Server Manager->Features-> Enable SMTP Server)
- Now it’s time to actually configure the SMTP Relay for Office 365. Start->Administrative Tools->Internet Information Services (IIS) 6.0 Manager.
- Click on the ‘+’ next to your host name.
- Right-click on the [SMTP Virtual Server…] and select Properties. It’s now time to step through each of the tabs to configure the SMTP relay.
- General Tab: The IP address should be set to (All Unassigned).
- Access Tab: Click Authentication… and select the Anonymous access check box. This is the authentication used by the applications and devices within your network to access the new SMTP relay. It is being configured to be open to every device on your network.
- Access Tab: Click Connection… Select ‘All Except the list below’ and leave the list below blank. This allows any device inside your firewall to access this relay.
- Access Tab: Click Relay… Select ‘All Except the list below’ and leave the list below blank. This allows any device inside your firewall to access this relay. This setting is extremely open and assumes you trust the devices connecting to your network not to abuse this relay.
- Messages Tab: No changes. The default works well.
- Delivery Tab: Click Outbound Security… Select Basic authentication and enter the username and password that is used to send e-mail to the external server (Office 365 in this case). The user name must be a fully qualified (ex: user@companyname.com) valid Office 365 user licensed for Exchange. Check TLS encryption.
- Delivery Tab: Click Outbound connections… Set the TCP port to 587.
- Delivery Tab: Click Advanced Delivery and set the Fully-qualified domain name box to the name of the local server that is acting as the relay (ex: myserver1). Set the Smart host the full-qualified name of the Office 365 SMTP Server (ex. pod51012.outlook.com) that you determined if the first section. Make sure the “Attempt direct…” box is unchecked.
- LDAP Routing and Security Tabs: No changes to these areas.
- Make sure the SMTP Server is started. Right-click the SMTP Virtual Server and choose Start.
0 Comments