Tag scan to email

How to Set Up A Receive Connector In Exchange for use with an MFD

How to Set Up A Receive Connector In Exchange for use with an Olivetti MFD

1st open the Exchange Management console on the server.

1

Go to Hub Transport on the server configuration tree.

3

Right click in the window labelled Receive Connectors and select New Receive Connector

4

Next give the receive connector a name and select internal from the list.

5

Next click on Add, then input the I.P. address of the MFD and click OK then Next, if there is already an I.P. range in the list delete it first.

6

Next click New to set up the new connector.

7

Then click Finish.

8

Next right click on the newly set up receive connector and select properties, then go to Permission Groups, make sure that Anonymous users is ticked.

9

Next go to the Authentication tab and make sure TLS is checked.

10

Next go to the Network tab and check that the settings match the image below, the I.P. address should be the one of your MFD not the one in the image.

11

Next click Apply to save the settings if you have had to make any changes.

12

Next enter the I.P. address of the email server on the MFD, select Start TLS and enter an email address for the machine in the field Device Email Address, you don’t need to enter any info in the authentication settings as we have set the receive connector to accept Anonymous connections.

13

If you need more info on how to set up scan to email on your machine then see this blog post.

If you need any more help or you need us to set it up for you then contact Elmdale Maintenance Ltd on 0118 982 1444

Setting Up Scan To Email on an Olivetti Colour MFD

Please find below a quick walk through of setting up scanning on an Olivetti colour MFD such as an MF250 though to the latest range of colour MFD’s. The screen may looking slightly different on the different ranges but the information required is the same.

You will need to login as an Administrator through the web terminal of the machine, this can be achieved by putting the IP address of the machine in the address bar of your web browser.

ip address

Next log out as a public user.

log out screen

Then select log in as an administrator, the password is 12345678

select administrator

Once you have logged in then go to Network, Email Setting, Email TX (SMTP)

smtp 1

Next enter your email server details, make sure to enter an email address for the machine to use. Enter any authentication details to allow it to connect to your email server, this might not be needed, if it won’t connect try turning this off.

You may also need to enter an email address for the Administrator before the machine will work as well. This can be done by going to the maintenance tab on the web interface (still in the admin screen) see below.

admin email address

Once all this information has been entered then log out of the Admin screen, it is important to do this as the machine will be locked until you have logged out and the users won’t be able to use it.

Next set up some email addresses in your address book, you can do this from the web page as well but you don’t have to be logged in as the Admin. If you go to Store Address, New Registration

address book

Select Email, OK

email address book

Fill in the details and select OK.

email information

Once you have finished adding entries to the address book you can now go and test to see if it works.

If you have any problems you can check in the Job History, on newer machines you should have an error code which will help you fault find, see below.

error codes

Should you need any help with setting this up or any other enquiry then call Elmdale Maintenance Ltd on 0118 982 1444 for assistance.

If you looking to set up scan to folder then you might want to read this post.

How to Configure An SMTP Relay in Exchange on SBS 2008 To Allow An MFP To Use Scan To Email

We occasionally have issues when setting up scan to email for clients where you get server connect errors, this is due to Exchange not allowing the MFP to relay through it. In most cases we have mentioned this to the companies IT representative and they have configured it for us.

Should the need arise I have found the following article from the Official SBS Blog: How to Configure Trusted SMTP Relay in Exchange on SBS 2008  just in case it is needed in the field.

There is also another article which I originally found at MPECS Inc. Blog where they configure it for use with a Konica Minolta bizhub machine which may be of use as well.  Or you can check out this post at Lyle Epstein’s Systems Engineer Blog which is also helpful.

How to Configure Trusted SMTP Relay in Exchange on latest windows servers SBS 2008 onwards

Today we will discuss the steps necessary to allow trusted internal servers and external authenticated users to relay email through your SBS 2008 server. You would do this for scenarios in which external POP3 or IMAP4 clients or an internal application server needs to send email through your Exchange server. This is not to be confused with external anonymous relay, where your server is open to any connecting IP address for abuse.

The key to making this secure is restricting access through either authentication or connection control (filtering by IP address). You will also see how SBS 2008 configures TLS in Exchange to encrypt your traffic to protect against eavesdropping.

Application Server Relay

SBS 2008 Setup creates a Default receive connector in Exchange to allow internal machines using Basic over TLS, Exchange Server, or Windows Integrated Authentication to relay. It listens on port 25 and allows connections from any IP address in the internal LAN. You may need to perform some extra configuration on your application servers to meet the authentication requirements of the connector.

You can tone down the security requirements in favor of an easier deployment by creating a new receive connector that allows anonymous relay, but only from specific IP addresses.

The Exchange blog already has a nice walkthrough on how to configure this. The requirements for SBS are no different. You can reach it through the following link: http://msexchangeteam.com/archive/2006/12/28/432013.aspx

External Client Relay

Exchange 2007 makes it easy to properly configure an external client receive connector. The first option you choose when creating a new connector is its intended use. When you select “client”, the connector is automatically configured with the proper port, authentication settings and permissions. All you need to choose is the name and remote IP ranges for the connector.

In the Exchange Management Console, expand Server Configuration > Hub Transport and under Actions choose New Receive Connector

clip_image002

On the introduction screen you choose the name and intended use. Choose Client

After this, you will select what remote IP address ranges that will be allowed to connect. The default includes all IPs.

clip_image004

At the completion screen, you can view the powershell command that has been applied behind the scenes:

New-ReceiveConnector –Name ‘Client’ –Usage ‘Client’ –RemoteIPRanges ‘0.0.0.0-255.255.255.255’ –Server ‘SERVER’

Now we can verify the network, authentication, and permission groups settings to see how a Client receive connector has been configured. If you go to the properties, you will see that it’s listening on port 587, that it has enabled Basic authentication over TLS, and that it is only allowing Exchange Users (Authenticated Users) to connect.

NOTE: Make sure that port 587 is open in your firewall

Further inspection of the AD permissions on the receive connector show that authenticated users have the ms-Exch-SMTP-Accept-Any-Recipient right. This is the relay permission and should never be owned by anonymous users. You can view this either through ADSIEDIT or by running the following powershell command:

Get-ADPermission “Client Receive Connector Name” | where {$_.ExtendedRights –match “ms-Exch-SMTP-Accept-Any-Recipient“} | fl

If you have successfully run the Internet Address Management Wizard from the SBS Console, then your Exchange certificate for TLS has already been installed and configured. You can verify this by running the Get-ExchangeCertificatecommandlet and find the certificate with your external DNS domain name. The certificate will have IPWS listed under Services, which stands for IMAP, POP, Web and SMTP respectively.

clip_image005

At this point, make sure that your Client receive connector is configured with the same FQDN that is listed in the subject of your Exchange certificate. This will be displayed in the banner:

clip_image007

Once all of this is done, you are ready to setup Outlook, Outlook Express, Windows Mail, etc. Important points here are:

  • The client machine must trust both the Exchange certificate and the Root CA in which it was created from. A good test is to open IE on the client and browse OWA to see if you get the certificate warning(s).
  • You must configure the mail client to connect on port 587 and to send the proper credentials for authentication.
  • The server requires a TLS connection, you must specify this in the mail client

 

Should you require any further info then contact Elmdale Maintenance on 0118 982 1444