Just deny permission Ms-Exch-Send-Headers-Routing for Anonymous Logon
get-SendConnector <connector-name> | Add-AdPermission -User “NT AUTHORITY\ANONYMOUS LOGON” -ExtendedRights Ms-Exch-Send-Headers-Routing -Deny
Other permissions:
| Send connector permission | Description |
|---|---|
|
ms-Exch-Send-Exch50 |
This permission allows the session to send a message that contains the EXCH50 command. If this permission isn’t granted, and a message is sent that contains the EXCH50 command, the server sends the message, but doesn’t include the EXCH50 command. |
|
Ms-Exch-Send-Headers-Routing |
This permission allows the session to send a message that has all received headers intact. If this permission isn’t granted, the server removes all received headers. |
|
Ms-Exch-Send-Headers-Organization |
This permission allows the session to send a message that has all organization headers intact. Organization headers all start with X-MS-Exchange-Organization-. If this permission isn’t granted, the sending server removes all organization headers. |
|
Ms-Exch-Send-Headers-Forest |
This permission allows the session to send a message that has all forest headers intact. Forest headers all start with X-MS-Exchange-Forest-. If this permission isn’t granted, the sending server removes all forest headers. |
Reference: http://technet.microsoft.com/en-us/library/aa998662.aspx
