How to Configure Outbound Access for Detection of Open Proxy Servers for Sender Reputation
Microsoft Exchange Server 2007 will reach end of support on April 11, 2017. To stay supported, you will need to upgrade. For more information, see Resources to help you upgrade your Office 2007 servers and clients.
Applies to: Exchange Server 2007, Exchange Server 2007 SP1, Exchange Server 2007 SP2, Exchange Server 2007 SP3
This topic explains how to use the Exchange Management Shell to configure outbound access for the detection of open proxy servers for sender reputation.
If you have enabled the detection of open proxy servers on sender reputation, you may have to perform additional configuration to enable sender reputation to traverse any firewalls that are between the Edge Transport server and the Internet. If you have a firewall or firewalls that are between the Edge Transport server and the Internet, you must verify that specific outbound ports are open.
You must complete the following configuration tasks:
Open outbound ports on any firewalls that are between the Edge Transport server and the Internet.
Configure sender reputation to use a specific proxy server.
If your organization uses a proxy server to manage outbound traffic through a firewall, you must configure sender reputation to use the proxy server. Sender reputation must have outbound connectivity to the Internet to detect open proxy servers. You must specify the proxy server name, type, and port number that sender reputation will use to access the Internet.
Configuring Firewall Ports
The open proxy detection test uses many protocols to test for open proxy servers. The following table lists the ports that must be opened outbound for sender reputation.
Ports that must be opened outbound
Protocols | Ports |
---|---|
SOCKS4, SOCKS5 |
1081, 1080 |
Wingate, Telnet, Cisco |
23 |
HTTP CONNECT, HTTP POST |
6588, 3128, 80 |
Before You Begin
To perform the following procedures on a computer that has the Edge Transport server role installed, you must log on by using an account that is a member of the local Administrators group on that computer.
Also, before you perform these procedures, confirm the following:
You have reviewed Anti-Spam and Antivirus Functionality to understand the general strategy for configuring all anti-spam agents so that they work together efficiently for your organization.
You have read Configuring Sender Reputation.
Procedure
To successfully configure sender reputation to detect open proxy servers, you must provide the following information:
The name of your organization's proxy server.
The port number for your organization's proxy server.
The type of proxy server that your organization runs.
To use the Exchange Management Shell to configure outbound access for the detection of open proxy servers
Run the following command:
Set-SenderReputationConfig -ProxyServerName <String> -ProxyServerPort <Int32> -ProxyServerType <String>
For example, to configure sender reputation to use the open proxy server, SERVER01 that uses an HTTP CONNECT protocol type with 80 as its server port, run the following command:
Set-SenderReputationConfig - ProxyServerName SERVER01 -ProxyServerPort 80 -ProxyServerType HttpConnect
For detailed syntax and parameter information, see Set-SenderReputationConfig.