[求助]认证用户的中继设置问题 [复制链接]

我在outlook 上设置了一个163的邮箱，我想在发送邮件的时候用公司的Exchange2010服务器，具体填写样子如下图所示

图片:QQ截图20121208161254.png

图片:QQ截图20121208160444.png

这个test01的账户是Exchange邮件服务器里的一个用户，单独设置这个账户在Outlook上进行邮件的收发都没有问题的。
但是使用这种中继的方式来发会出现下面的错误提示

图片:QQ截图20121208160509.png

我查看Exchange里的错误日志是这样的
2012-12-08T07:27:15.372Z,EX01\Default EX01,08CFA3243ED4FB3A,56,136.19.80.9:25,163.125.168.96:50582,-,,Remote
2012-12-08T07:28:04.668Z,EX01\Default EX01,08CFA32CB2399057,0,136.19.80.9:25,163.125.168.96:50585,+,,
2012-12-08T07:28:04.695Z,EX01\Default EX01,08CFA32CB2399057,1,136.19.80.9:25,163.125.168.96:50585,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
2012-12-08T07:28:04.733Z,EX01\Default EX01,08CFA32CB2399057,2,136.19.80.9:25,163.125.168.96:50585,>,"220 EX01.mail01.local Microsoft ESMTP MAIL Service ready at Sat, 8 Dec 2012 15:28:03 +0800",
2012-12-08T07:28:04.753Z,EX01\Default EX01,08CFA32CB2399057,3,136.19.80.9:25,163.125.168.96:50585,<,EHLO MyPC,
2012-12-08T07:28:04.755Z,EX01\Default EX01,08CFA32CB2399057,4,136.19.80.9:25,163.125.168.96:50585,>,250-EX01.mail01.local Hello [123.125.178.96],
2012-12-08T07:28:04.755Z,EX01\Default EX01,08CFA32CB2399057,5,136.19.80.9:25,163.125.168.96:50585,>,250-SIZE,
2012-12-08T07:28:04.755Z,EX01\Default EX01,08CFA32CB2399057,6,136.19.80.9:25,163.125.168.96:50585,>,250-PIPELINING,
2012-12-08T07:28:04.755Z,EX01\Default EX01,08CFA32CB2399057,7,136.19.80.9:25,163.125.168.96:50585,>,250-DSN,
2012-12-08T07:28:04.755Z,EX01\Default EX01,08CFA32CB2399057,8,136.19.80.9:25,163.125.168.96:50585,>,250-ENHANCEDSTATUSCODES,
2012-12-08T07:28:04.755Z,EX01\Default EX01,08CFA32CB2399057,9,136.19.80.9:25,163.125.168.96:50585,>,250-STARTTLS,
2012-12-08T07:28:04.755Z,EX01\Default EX01,08CFA32CB2399057,10,136.19.80.9:25,163.125.168.96:50585,>,250-X-ANONYMOUSTLS,
2012-12-08T07:28:04.755Z,EX01\Default EX01,08CFA32CB2399057,11,136.19.80.9:25,163.125.168.96:50585,>,250-AUTH NTLM LOGIN,
2012-12-08T07:28:04.755Z,EX01\Default EX01,08CFA32CB2399057,12,136.19.80.9:25,163.125.168.96:50585,>,250-X-EXPS GSSAPI NTLM,
2012-12-08T07:28:04.755Z,EX01\Default EX01,08CFA32CB2399057,13,136.19.80.9:25,163.125.168.96:50585,>,250-8BITMIME,
2012-12-08T07:28:04.755Z,EX01\Default EX01,08CFA32CB2399057,14,136.19.80.9:25,163.125.168.96:50585,>,250-BINARYMIME,
2012-12-08T07:28:04.755Z,EX01\Default EX01,08CFA32CB2399057,15,136.19.80.9:25,163.125.168.96:50585,>,250-CHUNKING,
2012-12-08T07:28:04.755Z,EX01\Default EX01,08CFA32CB2399057,16,136.19.80.9:25,163.125.168.96:50585,>,250-XEXCH50,
2012-12-08T07:28:04.755Z,EX01\Default EX01,08CFA32CB2399057,17,136.19.80.9:25,163.125.168.96:50585,>,250-XRDST,
2012-12-08T07:28:04.755Z,EX01\Default EX01,08CFA32CB2399057,18,136.19.80.9:25,163.125.168.96:50585,>,250 XSHADOW,
2012-12-08T07:28:04.775Z,EX01\Default EX01,08CFA32CB2399057,19,136.19.80.9:25,163.125.168.96:50585,<,STARTTLS,
2012-12-08T07:28:04.775Z,EX01\Default EX01,08CFA32CB2399057,20,136.19.80.9:25,163.125.168.96:50585,>,220 2.0.0 SMTP server ready,
2012-12-08T07:28:04.775Z,EX01\Default EX01,08CFA32CB2399057,21,136.19.80.9:25,163.125.168.96:50585,*,,Sending certificate
2012-12-08T07:28:04.775Z,EX01\Default EX01,08CFA32CB2399057,22,136.19.80.9:25,163.125.168.96:50585,*,CN=EX01,Certificate subject
2012-12-08T07:28:04.775Z,EX01\Default EX01,08CFA32CB2399057,23,136.19.80.9:25,163.125.168.96:50585,*,CN=EX01,Certificate issuer name
2012-12-08T07:28:04.775Z,EX01\Default EX01,08CFA32CB2399057,24,136.19.80.9:25,163.125.168.96:50585,*,1880DD52061392B0469CF752A2ED0A19,Certificate serial number
2012-12-08T07:28:04.775Z,EX01\Default EX01,08CFA32CB2399057,25,136.19.80.9:25,163.125.168.96:50585,*,2DD56E0F726C2F934F1F61E6EE90832DF133D831,Certificate thumbprint
2012-12-08T07:28:04.775Z,EX01\Default EX01,08CFA32CB2399057,26,136.19.80.9:25,163.125.168.96:50585,*,EX01;EX01.mail01.local,Certificate alternate names
2012-12-08T07:28:04.843Z,EX01\Default EX01,08CFA32CB2399057,27,136.19.80.9:25,163.125.168.96:50585,<,EHLO MyPC,
2012-12-08T07:28:04.843Z,EX01\Default EX01,08CFA32CB2399057,28,136.19.80.9:25,163.125.168.96:50585,*,,TlsDomainCapabilities='None'; Status='NoRemoteCertificate'
2012-12-08T07:28:04.843Z,EX01\Default EX01,08CFA32CB2399057,29,136.19.80.9:25,163.125.168.96:50585,>,250-EX01.mail01.local Hello [123.125.178.96],
2012-12-08T07:28:04.843Z,EX01\Default EX01,08CFA32CB2399057,30,136.19.80.9:25,163.125.168.96:50585,>,250-SIZE,
2012-12-08T07:28:04.843Z,EX01\Default EX01,08CFA32CB2399057,31,136.19.80.9:25,163.125.168.96:50585,>,250-PIPELINING,
2012-12-08T07:28:04.843Z,EX01\Default EX01,08CFA32CB2399057,32,136.19.80.9:25,163.125.168.96:50585,>,250-DSN,
2012-12-08T07:28:04.843Z,EX01\Default EX01,08CFA32CB2399057,33,136.19.80.9:25,163.125.168.96:50585,>,250-ENHANCEDSTATUSCODES,
2012-12-08T07:28:04.843Z,EX01\Default EX01,08CFA32CB2399057,34,136.19.80.9:25,163.125.168.96:50585,>,250-AUTH NTLM LOGIN,
2012-12-08T07:28:04.843Z,EX01\Default EX01,08CFA32CB2399057,35,136.19.80.9:25,163.125.168.96:50585,>,250-X-EXPS GSSAPI NTLM,
2012-12-08T07:28:04.843Z,EX01\Default EX01,08CFA32CB2399057,36,136.19.80.9:25,163.125.168.96:50585,>,250-8BITMIME,
2012-12-08T07:28:04.843Z,EX01\Default EX01,08CFA32CB2399057,37,136.19.80.9:25,163.125.168.96:50585,>,250-BINARYMIME,
2012-12-08T07:28:04.843Z,EX01\Default EX01,08CFA32CB2399057,38,136.19.80.9:25,163.125.168.96:50585,>,250-CHUNKING,
2012-12-08T07:28:04.843Z,EX01\Default EX01,08CFA32CB2399057,39,136.19.80.9:25,163.125.168.96:50585,>,250-XEXCH50,
2012-12-08T07:28:04.843Z,EX01\Default EX01,08CFA32CB2399057,40,136.19.80.9:25,163.125.168.96:50585,>,250-XRDST,
2012-12-08T07:28:04.843Z,EX01\Default EX01,08CFA32CB2399057,41,136.19.80.9:25,163.125.168.96:50585,>,250 XSHADOW,
2012-12-08T07:28:04.860Z,EX01\Default EX01,08CFA32CB2399057,42,136.19.80.9:25,163.125.168.96:50585,<,AUTH NTLM,
2012-12-08T07:28:04.860Z,EX01\Default EX01,08CFA32CB2399057,43,136.19.80.9:25,163.125.168.96:50585,>,334 <authentication response>,
2012-12-08T07:28:04.878Z,EX01\Default EX01,08CFA32CB2399057,44,136.19.80.9:25,163.125.168.96:50585,>,334 <authentication response>,
2012-12-08T07:28:04.898Z,EX01\Default EX01,08CFA32CB2399057,45,136.19.80.9:25,163.125.168.96:50585,*,SMTPSubmit SMTPAcceptAnyRecipient BypassAntiSpam AcceptRoutingHeaders,Set Session Permissions
2012-12-08T07:28:04.905Z,EX01\Default EX01,08CFA32CB2399057,46,136.19.80.9:25,163.125.168.96:50585,*,MAIL01\test01,authenticated
2012-12-08T07:28:04.905Z,EX01\Default EX01,08CFA32CB2399057,47,136.19.80.9:25,163.125.168.96:50585,>,235 2.7.0 Authentication successful,
2012-12-08T07:28:04.923Z,EX01\Default EX01,08CFA32CB2399057,48,136.19.80.9:25,163.125.168.96:50585,<,MAIL FROM: <abc@163.com>,
2012-12-08T07:28:04.953Z,EX01\Default EX01,08CFA32CB2399057,49,136.19.80.9:25,163.125.168.96:50585,*,08CFA32CB2399057;2012-12-08T07:28:04.655Z;1,receiving message
2012-12-08T07:28:04.955Z,EX01\Default EX01,08CFA32CB2399057,50,136.19.80.9:25,163.125.168.96:50585,>,250 2.1.0 Sender OK,
2012-12-08T07:28:04.970Z,EX01\Default EX01,08CFA32CB2399057,51,136.19.80.9:25,163.125.168.96:50585,<,RCPT TO: <abc@163.com>,
2012-12-08T07:28:04.988Z,EX01\Default EX01,08CFA32CB2399057,52,136.19.80.9:25,163.125.168.96:50585,>,250 2.1.5 Recipient OK,
2012-12-08T07:28:05.005Z,EX01\Default EX01,08CFA32CB2399057,53,136.19.80.9:25,163.125.168.96:50585,<,DATA,
2012-12-08T07:28:05.015Z,EX01\Default EX01,08CFA32CB2399057,54,136.19.80.9:25,163.125.168.96:50585,>,354 Start mail input; end with <CRLF>.<CRLF>,
2012-12-08T07:28:05.258Z,EX01\Default EX01,08CFA32CB2399057,55,136.19.80.9:25,163.125.168.96:50585,>,550 5.7.1 Client does not have permissions to send as this sender,
2012-12-08T07:28:05.275Z,EX01\Default EX01,08CFA32CB2399057,56,136.19.80.9:25,163.125.168.96:50585,-,,Remote

我测试用Exchange2003的账户这样设置是可以发送成功的，所以我在想Exchange2010上可能某个地方设置有问题，请高手指点，谢谢！

找到原因了，把test01这个用户加到Domain Admins组就可以了，谢谢聆 ∮ 听提供帮助。

但是应该是少了某个权限，到底是什么呢？

不会，帮顶

dxjabc:找到原因了，把test01这个用户加到Domain Admins组就可以了，谢谢聆 ∮ 听提供帮助。
但是应该是少了某个权限，到底是什么呢？(2012-12-10 13:35)嬀/color]

从日志来看，你发送邮件的时候发件人依然是abc@163.com而不是test01@domain.com?如果是的话，为什么要这么做呢？

有些邮件比如从163发不出去，但是从公司的Exchange账户可以发，那么就暂时用这个的方法中继一下。

dxjabc:有些邮件比如从163发不出去，但是从公司的Exchange账户可以发，那么就暂时用这个的方法中继一下。(2012-12-13 13:31)嬀/color]

如果是这样的话，首先你需要在你的Exchange服务器上开启open relay，但是这个会将你的Exchange置于一个不安全的境地。

其次，如果收件方要求反向解析的话，会发现这封来自163.com的邮件并不是从163的服务器发出来的，因此多数会拒绝掉。