Microsoft Exchange 2003 Configuration Guide Microsoft Exchange 2003 Configuration Guide Page 1
Table of Contents Introduction... 2 Document and naming conventions... 2 Outbound email protection... 3 SMTP Authentication... 6 Sender Policy Framework (SPF)... 7 Inbound email protection... 8 Contact MailGuard... 10 Introduction This Configuration Guide provides a step by step guide to configuring Microsoft Exchange Server 2003 for MailGuard email filtering. Should you have any questions or require further assistance, please contact the MailGuard Service Desk.. DOCUMENT AND NAMING CONVENTIONS In order to achieve full understanding of the instructions given in this guide, note that the following standards will be followed: The names of pages are referred to in Bold Italic letters. For example, the Management Portal page or the Users page. The names of fields (i.e. buttons, menus, text boxes, etc.) are referred to in Bold letters. For example, the Configure menu or the Submit button. The values of fields (i.e. data entered by the user on a page s given fields) are referred to in Italic letters. For example, Yes or No as options in a dropdown box. Actions that link to other sections in the document are referred to in Underlined letters. For example, the Sort and View Quarantined Messages section. Microsoft Exchange 2003 Configuration Guide Page 2
Outbound email protection Having your outbound email filtered by MailGuard means messages are always scanned for viruses, and malware and can be configured to filter for spam. By preventing spam being relayed from your domain, you minimise the risk of being blacklisted and ensure viruses and malware aren t transmitted to your clients, partners and other stakeholders. What s more, MailGuard makes it easy to control what content can and can t leave your organisation. You can customise policies that suit your business needs and prevent content leaving that falls outside of your policies. Outbound security not only ensures mail sent is clean but also minimises the risk of confidential data leaving your organisation. To configure outbound email protection, you must configure Microsoft Exchange to send outbound email via the MailGuard Filter Network Open the Microsoft Exchange System Manager. Right click Connectors in the left hand panel and select New, then SMTP Connector. On the General tab, enter MailGuard for the name. Check the radio button to Forward all mail through this connector to the following smart hosts then enter the outbound host you have been provided during setup. If you do not have this information, you can find it in the management console by going to Configure > MailGuard > Domains > [domain name] > Configuration Add a new Local bridgehead by clicking the Add button Microsoft Exchange 2003 Configuration Guide Page 3
Highlight the Default SMTP Virtual Server entry and click OK Select the Address Space tab Click the Add button to add a new address space. Microsoft Exchange 2003 Configuration Guide Page 4
Select SMTP as the address type and click OK Leave all other properties of the connector as the defaults and click OK to save and close the new connector. You have now successfully routed all outbound email to MailGuard s filter network. If you have a static IP address, you must give this address to MailGuard, or you must configure SMTP Authentication so that MailGuard s filter network accepts outbound email from your server If you do not have a static IP address, you must configure SMTP Authentication so that MailGuard s filter network accepts the outbound email from your server. Microsoft Exchange 2003 Configuration Guide Page 5
SMTP AUTHENTICATION Once you've configured your Exchange server to send all outbound email through MailGuard you must configure your Exchange server to authenticate itself to MailGuard. Open the Microsoft Exchange System Manager. Click Connectors in the left hand panel and right click on the MailGuard connector created in the previous chapter Outbound email protection. Select the Properties menu option. Select the Advanced tab and click the Outbound Security button Microsoft Exchange 2003 Configuration Guide Page 6
Select Basic Authentication then click Modify. Enter your provided User and Password, repeat the password in the Confirm Password field, then click OK. If you do not have this information, you can find it in the management console by going to Configure > MailGuard > Domains > [domain name] > Configuration Click OK to close the Outbound Security window, and click OK to close the connector. You have now successfully configured Microsoft Exchange to authenticate with the MailGuard filter network and outbound email will now be successfully delivered. If you have implemented SPF records for your domain, you must update them to include MailGuard s servers. SENDER POLICY FRAMEWORK (SPF) Spammers and scammers typically forge the return path (sender) of the email they send. In the case of fraud, they may forge the sender to make the email appear to have come from your organisation. Using SPF allows spam and scam detection software to immediately detect email claiming to come from your organisation. While setting SPF records doesn t protect your own network, it can protect your brand and is considered good practice. Configuration of SPF is done via DNS records and is beyond the scope of this document. Contact your DNS provider to correctly set your SPF. To allow outbound email via MailGuard s filter network, you must include the following directive: include:customer.mailguard.com.au If you have SPF records, but do not include this domain, other spam protection services are likely to not accept your email. If you need more information, please contact the MailGuard Service Desk. Microsoft Exchange 2003 Configuration Guide Page 7
Inbound email protection It is vital that you prevent malicious users from delivering messages directly to your Exchange Server (thus bypassing MailGuard's servers). Without preventing this, you will continue to receive spam, malware and other unwanted email. This is called an ACL: Access Control List. It is a list of servers from which your Microsoft Exchange server will accept email. Open the Microsoft Exchange System Manager. Click Servers in the left hand panel then click Protocols then SMTP. Right-click the Default SMTP Virtual Server and select Properties from the menu. From the Access tab, click on the Connection button. Select the option labelled Only the list below. Microsoft Exchange 2003 Configuration Guide Page 8
Click the Add button to add every server in MailGuard s published ACL (which can be found at http://mailguard.com.au/landing/acl). If computers on your network connect to this server for SMTP delivery, you will need to also add their respective IP addresses to the list. You can do this one host at a time as per the MailGuard ACL list, or you can add your entire network using the Group of computers option. For example, if your users send email using this Microsoft Exchange server from a network with the address range 10.0.0.0 to 10.0.0.255, you will need to add the address 10.0.0.0 with the Subnet mask of 255.255.255.0. For further assistance with this, please contact MailGuard s Service Desk. Due to network upgrades and expansion this list is typically updated every three or four years. Each time it is updated you must update your settings in Microsoft Exchange. You will receive long advanced warning of any required changes. Microsoft Exchange 2003 Configuration Guide Page 9
Contact MailGuard Head Office MailGuard Pty Ltd. 68-72 York Street South Melbourne Victoria 3205 Australia General Enquiries Australia: 1300 30 44 30 International: +61 3 9694 4444 Fax: +61 3 9694 4410 Sales Tel: 1300 30 44 30 Email: sales@mailguard.com.au Technical Support Australia: 1300 30 65 10 UK: 0 800 404 8993 USA: 1 888 848 2822 Email: support@mailguard.com.au Media Enquiries: Tel: +61 9694 4444 Email: marketing@mailguard.com.au 20121025-6 Microsoft Exchange 2003 Configuration Guide Page 10