Exchange 2010 with SPX Virtual Appliance - error 530 5.7.1

Question

Hi,

I've setup the following topology

Internet -> Sophos Virtaul Email Appliance -> Exchange 2010 Hub Transport

Sending emails out from internally works fine, as in it passes through the whole topology great.

However, incoming emails when switching it over to use the Sophos Appliance bounces emails back with 530 5.7.1 Client was not authenticated (in reply to mail from command)

The receive connection on the Hub transport allows anon. connections and ive bounced the hub transport service. Oddly with verbose logging mode on the email never appears even in the logs of exchange receive. However, the Sophos appliance does log it so I know for a fact the email is coming into the appliance but its getting rejected by Exchange. It's almost as if Exchange isnt allowing anon. connection.

Im wondering whether I need to create a new receive connection as an open relay to only the Sophos appliance.

Any help would be great

This thread was automatically locked due to age.

SGICT · Accepted Answer

FIXED! Thanks TomA for your reply - Sadly, I had already gone through what you suggested. The problem was down to the Exchange 2010 setup and using Anti-Spam feature on the Hub Transport server rather than relying on an Edge Transport server (Sophos Appliance is taking it's role). If you use Hub Transport server as your external mail delivering/receiving server then you can enable Anti-Spam feature via running elevated powershell script: %system drive%/Program Files\Microsoft\Exchange Server\V14\Scripts folder\install-AntispamAgents.ps1 What I didn't realise is activating the Anti-Spam filter on the hub transport actually disallows the ability of appliances to email it. This would explain why I didnt see any logs entries because it was simply being dropped. I didn't go into it much further as to how to allow it because we're switching over to Sophos Appliance as our external mail delivering/receiving server so Anti-Spam filter is no longer required on the Hub. However, there is very little on search engines on how to Remove or disable Anti Spam Functionality on an Exchange 2010 Hub Transport Server so for the record you need to run this in elevated mode in powershell %system drive%/Program Files\Microsoft\Exchange Server\V14\Scripts folder\uninstall-AntispamAgents.ps1 Bounce the Transport Service on the Hub. That's it, Sophos will start working. :25899