Internet access on the Exchange Servers # Need Information

Question

Internet access on the Exchange Servers # Need Information
Hello Folks,

I would like to know whether we need internet on Exchange Servers.

As far as i understand we need to internet access on the application.

Please help me with more clarification.

thanks !!

Answer 1

If the Exchange Servers do not have access to the internet , they will probably have issues checking Cert Revocation
https://techcommunity.microsoft.com/t5/exchange-team-blog/configuring-exchange-servers-without-internet-access/ba-p/593692

Work-around is to install a local CRL server:

https://techcommunity.microsoft.com/t5/configuration-manager-archive/how-to-publish-the-crl-on-a-separate-web-server/ba-p/272748

or disabling the check:
https://social.technet.microsoft.com/Forums/ie/en-US/1a89fff4-da6e-4055-be04-2e52af3ee76e/disable-crl-check-for-exchange-servers-without-internet-access?forum=exchange2010

Answer 2

anonymous user
Hi,
In order to receive messages from the internet, you need to configure the external URLs of the virtual directories on your exchange server.
And you also need to set the following records in the public DNS.

Here is a document on this topic for your reference: Configure mail flow and client access on Exchange servers

To send messages to the internet,you need to create a send connector and configure it to send to the internet.
For more detailed steps,please refer to this document: Create a Send connector in Exchange Server to send mail to the internet

In addition,for security and to prevent your outbound messages from being recognized as spam,you may also need to set SPF, DKIM or DMARC records for your domain in the public DNS.

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 3

anonymous userDavid

Thank you David !!

So if we disable the CRL check hope it will not have any issue on the mail flow internal and external.

Regards,
Arif

Answer 4

Hi Andy,anonymous userDavid

Thanks for your reply !!

So if i just allow the URL for CRL check that should be fine or i need full internet access only.

I am purchasing certificate from digicert can you let me know which specific url will be used by exchange server to do the check?

Regards,
Arif