Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Check MX Record of Incoming Mail

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2003] >> Server Security >> Check MX Record of Incoming Mail Page: [1]
Login
Message << Older Topic   Newer Topic >>
Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM
TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!
Check MX Record of Incoming Mail - 7.Feb.2008 6:22:45 PM   
AdmiralNemo

 

Posts: 11
Joined: 14.Dec.2007
Status: offline
Hi All,

My server is receiving extremely large amounts of spam addressed to invalid users on my domain. As a result, Exchange generates an undeliverable message and sends it back to the sender, but unfortunately, many of the sender's addresses are invalid themselves. 60% of the spam I receive comes from silly addresses like "lkjgf@n". Clearly "n" is not a valid DNS domain so Exchange just sits there all day trying to contact the mail server for "n" to send this undeliverable to. After several hours, outbound queues get so clogged, I have to stop the services and clear them out.

My question to you is this: Is there a way for Exchange to evaluate the domain portion of sender addresses of incoming mail and ensure there is in fact an MX record associated with it? Or better yet, ensure that the message is coming *from* the designated MX record for that domain and if not, silently drop the connection? Forgive me for saying this, but Postfix has such features, and since I implemented them, my spam volume has been significantly reduced.

Any suggestions you have are very much appreciated.

Thanks
Post #: 1
RE: Check MX Record of Incoming Mail - 8.Feb.2008 4:23:03 AM   
alex.c

 

Posts: 47
Joined: 12.Jan.2005
From: AT/Vienna
Status: offline
Hi Admiral *salute*
 
I assume you are using Exchange 2003..?
 
First lets address "spam addressed to invalid users on my domain”.
 
You can filter mails which are addressed to invalid users going this way:
 
-open Exchange System Managerexpand Global Settings
-
open the properties of Message deliveryin the "Recipient Filtering” tab, check "Filter recipients who are not in the directory” and click OK
-navigate to your server object and expand to Protocols – SMTP

-open the properties of your Default SMTP Virtual server

-In the General-tab click "Advanced”

-Mark the appropriate IP address and click Edit
Check "Apply Recipient Filter” and click OK, OK, OK
-
Restart the Default SMTP Virtual Server

Now your Exchanger does not accept messages to invalid recipients and drops the connection.
 
To be continued…
Alex

< Message edited by alex.c -- 8.Feb.2008 4:24:55 AM >

(in reply to AdmiralNemo)
Post #: 2
RE: Check MX Record of Incoming Mail - 8.Feb.2008 4:41:41 AM   
alex.c

 

Posts: 47
Joined: 12.Jan.2005
From: AT/Vienna
Status: offline
Hi again!

I found a few articles about Sender ID Filtering, which would address your question "Is there a way for Exchange to evaluate the domain portion of sender addresses of incoming mail and ensure there is in fact an MX record associated with it?"

http://www.msexchange.org/tutorials/Configuring-enabling-Sender-ID-filtering-Exchange-2003-SP2.html
http://www.msexchange.org/tutorials/order-which-Exchange-2003-SP2-Connection-Filters-applied.html
http://www.microsoft.com/technet/technetmag/issues/2006/01/NewWeapons/
http://technet.microsoft.com/en-us/library/aa995992.aspx

And not to forget the Inteligent Message Filter..
http://www.microsoft.com/technet/prodtechnol/exchange/downloads/2003/imf/overview.mspx

I hope this will help you solving those issues!

Alex

_____________________________

Every love letter needs a working mail server...

(in reply to alex.c)
Post #: 3
RE: Check MX Record of Incoming Mail - 8.Feb.2008 11:30:46 PM   
AdmiralNemo

 

Posts: 11
Joined: 14.Dec.2007
Status: offline
Thanks for the advice. I am looking into those options/filters now. I appreciate your prompt help.

(in reply to alex.c)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2003] >> Server Security >> Check MX Record of Incoming Mail Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts