Google Outbound Services Configuration Guide - Manual (Page 30)

32 Outbound Services Configuration Guide
Legal Disclaimer
This guide describes how Postini products work with Microsoft Exchange and the
configurations that Postini recommends. These instructions are designed to work
with the most common Microsoft Exchange scenarios. Any changes to Microsoft
Exchange configuration should be made at the discretion of your Microsoft
Exchange administrator.
Note: Postini Customer Care does not provide technical support for configuring
mail servers or third-party products. In the event of a Microsoft Exchange issue,
you should consult your Microsoft Exchange administrator. POSTINI ACCEPTS
NO RESPONSIBILITY FOR THIRD-PARTY PRODUCTS. You may also contact
Postini Professional Services for consulting services and options.
Links to Microsoft Exchange Web sites are provided for your convenience. The
links and their content may change without notice. Please consult the product's
Web site for the latest configuration and support information.
Set Up Reinjection
Before you can register your IP addresses in the Administrative Console or set up
a smarthost, you must allow reinjection. For an overview of reinjection concepts,
see “Set Up Reinjection” on page 14.
For most configurations of Exchange 2007 and 2010, a sender must provide
authentication to relay mail from outside sources. However, SMTP authentication
is not possible for reinjection. Instead, create a private relay to allow reinjection.
The simplest way to create a relay in Exchange 2007 or 2010 is to create a
receive connector, limit the connector to an appropriate set of IP addresses, and
allow anonymous connections.
There are two ways to set up a private relay for Exchange 2007 and 2010,
allowing anonymous access, or an externally secured connector:
• Allow Anonymous Access: Easier to configure, and more reliable.
Reinjected messages are considered anonymous. However, this method is
not compatible with ResolveP2, and messages will be filtered with Microsoft
Exchange 2007/2010 anti-spam filtering.
• Externally Secured Connector: This method requires additional effort, but is
compatible with ResolveP2, and reinjected messages bypass anti-spam
filtering.
Allow Anonymous Access is the better choice in most cases. If you are using
ResolveP2, or if reinjected messages are caught by anti-spam filters, use an
Externally Secured Connector instead.
Whichever method you use, first create the receive connector.