Edge Transport ServerEdge Transport servers

Edge Transport server 會處理所有輸入與輸出網際網路郵件流程所提供郵件轉送和智慧主機服務,Exchange 組織。Edge Transport servers handle all inbound and outbound Internet mail flow by providing mail relay and smart host services for your Exchange organization. 在 Edge Transport server 上執行的代理程式提供額外的郵件保護和安全性層。Agents running on the Edge Transport server provide additional layers of message protection and security. 這些代理程式提供防範垃圾郵件,並且套用郵件流程規則 (也稱為傳輸規則),以控制郵件流程。These agents provide protection against spam and apply mail flow rules (also known as transport rules) to control mail flow. 這些功能的所有共同運作來協助降低您的內部 Exchange 曝露在網際網路上的威脅。All of these features work together to help minimize the exposure of your internal Exchange to threats on the Internet.

因為周邊網路中安裝 Edge Transport server,它會永遠不是您的組織內部 Active Directory 樹系的成員,並沒有 Active Directory 資訊的存取權。Because the Edge Transport server is installed in the perimeter network, it's never a member of your organization's internal Active Directory forest and doesn't have access to Active Directory information. 不過,Edge Transport server 需要位於 Active Directory 中的資料: 例如,郵件流程和收件者資訊的反垃圾郵件的收件者查閱工作的連接器資訊。However, the Edge Transport server requires data that resides in Active Directory: for example, connector information for mail flow and recipient information for antispam recipient lookup tasks. 此資料是由 Microsoft Exchange EdgeSync 服務 (EdgeSync) 同步至 Edge Transport server。This data is synchronized to the Edge Transport server by the Microsoft Exchange EdgeSync service (EdgeSync). EdgeSync 是一群建立單向複寫的收件者和組態資訊從 Active Directory 至 Active Directory 輕量型目錄服務 (AD LDS) 的 Exchange 2016 或 Exchange 2019 信箱伺服器上執行的程序在 Edge Transport server 上的執行個體。EdgeSync is a collection of processes run on an Exchange 2016 or Exchange 2019 Mailbox server to establish one-way replication of recipient and configuration information from Active Directory to the Active Directory Lightweight Directory Services (AD LDS) instance on the Edge Transport server. EdgeSync 會複製 Edge Transport server 執行反垃圾郵件組態工作,並啟用端對端郵件流程所需的資訊。EdgeSync copies only the information that's required for the Edge Transport server to perform antispam configuration tasks and to enable end-to-end mail flow. EdgeSync 會執行排定的更新,讓 AD LDS 資訊保持最新。EdgeSync performs scheduled updates so the information in AD LDS remains current. 如需 Edge 訂閱和 EdgeSync 的詳細資訊,請參閱Edge 訂閱For more information about Edge Subscriptions and EdgeSync, see Edge Subscriptions.

您可以在周邊網路中安裝多個 Edge Transport server。You can install more than one Edge Transport server in the perimeter network. 部署多個 Edge Transport server 以提供重複和容錯移轉功能,以您的輸入的郵件流程。Deploying more than one Edge Transport server provides redundancy and failover capabilities for your inbound message flow. 您可以定義多個具有相同優先順序值為郵件網域的 MX 記錄,Edge Transport server 之間組織負載平衡的 SMTP 流量。You can load balance the SMTP traffic to your organization among Edge Transport servers by defining more than one MX record with the same priority value for your mail domain. 您可以使用複製的組態指令碼來達成多部 Edge Transport server 之間的組態的一致性。You can achieve consistency in the configuration among multiple Edge Transport servers by using cloned configuration scripts.

將 Edge Transport server role 可讓您管理下列郵件處理案例。The Edge Transport server role lets you manage the following message-processing scenarios.

網際網路郵件流程Internet mail flow

Edge Transport server 接受從網際網路進入 Exchange 組織的郵件。Edge Transport servers accept messages coming into the Exchange organization from the Internet. Edge Transport server 處理郵件之後,郵件會路由傳送到內部部署 Exchange 信箱伺服器;第一個前端傳輸服務,然後以 「 傳輸 」 服務。After the messages are processed by the Edge Transport server, mail is routed to an internal Exchange Mailbox server; first to the Front End Transport service, and then to the Transport service.

所有傳送給組織內從網際網路郵件會路由傳送至 Edge Transport server 之後的 Exchange 信箱伺服器上的傳輸服務處理郵件。All messages sent to the Internet from inside the organization are routed to Edge Transport servers after the messages are processed by the Transport service on the Exchange Mailbox server. 您可以設定 Edge Transport server 使用 DNS 來解析為外部的 SMTP 網域的 MX 資源記錄或者您可以設定 Edge Transport server 將郵件轉寄到智慧主機的 DNS 解析。You can configure the Edge Transport server to use DNS to resolve MX resource records for external SMTP domains, or you can configure the Edge Transport server to forward messages to a smart host for DNS resolution.

反垃圾郵件保護Antispam protection

在 Exchange Server 中,反垃圾郵件功能會提供服務給封鎖在網路周邊未經同意的廣告郵件 (垃圾郵件)。In Exchange Server, antispam features provide services to block unsolicited commercial email (spam) at the network perimeter.

濫發垃圾郵件者會使用各種技術來傳送到貴組織的垃圾郵件。Spammers use a variety of techniques to send spam into your organization. Edge Transport server 協助防止使用者曾經收到垃圾郵件代理程式會共同運作來提供不同層級的垃圾郵件篩選和保護的集合。Edge Transport servers help prevent users from ever receiving spam by providing a collection of agents that work together to provide different layers of spam filtering and protection. 建立連接器上的垃圾郵件防堵間隔會使電子郵件收集嘗試失效。Establishing tarpitting intervals on connectors makes email harvesting attempts ineffective.

Edge Transport server 上的郵件流程規則Mail flow rules on Edge Transport servers

Edge Transport server 上的郵件流程規則用來控制傳送至或接收自網際網路的郵件流程。Mail flow rules on Edge Transport servers are used to control the flow of messages sent to or received from the internet. 郵件流程規則會每個 Edge Transport server 上設定來協助保護企業網路資源和資料,藉由將動作套用至郵件符合指定條件。Mail flow rules are configured on each Edge Transport server to help protect corporate network resources and data by applying an action to messages meeting specified conditions. 郵件流程規則條件會根據資料,例如特定字詞或在郵件主旨、 內文、 標頭,或從地址的文字模式垃圾郵件信賴等級 (SCL);或附件類型。Mail flow rule conditions are based on data, such as specific words or text patterns in the message subject, body, header, or from address; the spam confidence level (SCL); or the attachment type. 動作判定指定的條件,則為 true 時,如何處理訊息。Actions determine how the message is processed when a specified condition is true. 可能的動作包括隔離郵件、 捨棄或拒絕郵件、 附加其他收件者,或記錄的事件。Possible actions include quarantining a message, dropping or rejecting a message, appending additional recipients, or logging an event. 選用的例外狀況排除特定的郵件不套用動作。Optional exceptions exempt particular messages from having an action applied.

地址修正Address rewriting

地址修正給外部收件者呈現一致的電子郵件地址外觀。Address rewriting presents a consistent email address appearance to external recipients. 您設定地址修正修改上輸入及輸出郵件的 SMTP 位址的 Edge Transport server 上。You configure address rewriting on Edge Transport servers to modify the SMTP addresses on inbound and outbound messages. 地址修正會特別有用的新合併組織想要呈現一致的電子郵件地址外觀。Address rewriting is especially useful for newly merged organizations that want to present a consistent email address appearance.