Re: Mail filtering with Exchange

From: Chad A. Gross [SBS MVP] (chad.gross_at_laytonflower.nospam.com)
Date: 06/21/04


Date: Mon, 21 Jun 2004 01:37:13 -0500

Nope.

He's filtering inbound email and rejecting anything that claims to come from
his own domain. Obviously, he can receive the mail succesfully if he
disables the filter - but as soon as he disables the filter his ISP detects
this during a nightly scan and threatens to disconnect & blacklist them (as
a potential open relay???)

About the only way around it that I can think of is to use some sort of 3rd
email addy . . . e.g. yahoo or something where you can set Outlook-style
rules. Update the mailing list & replace your domain users' email addresses
with the 3rd party addresses, then configure rules in the 3rd party
mailboxes to automatically forward email from yourdomain to the appropriate
email address at your domain. Therefore the mailing company sends out the
email which appears to come from your domain, the 3rd party mailbox
automatically forwards it to the users at your domain, your server sees the
email as coming from the 3rd party email provider (and thus doesn't filter
it) - and the filter is still active so you keep the ISP happy . . .

Down-right ugly work-around, but about the best I can think of at this time
of night (err, morning) . . . :^)

-- 
Chad A. Gross - SBS MVP
SBS ROCKS!
www.msmvps.com/cgross
www.gosbs.org
Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] wrote:
> Sorry but I don't quite understand?  If that external company sends it
> to a real live address inside the domain, it should come in?
>
> John Smith wrote:
>
>> I have a client who is running Small Business Server 2000, using
>> Exchange 2000 as their mail server. Let's say for arguments sake
>> that their domain is @my-company.com.au. They use an external
>> company to send out mailing lists to clients in order to reduce the
>> load on their server and internet connection.
>>
>> The problem is that the external company is "spoofing" the From:
>> address on the emails, so it appears to come from
>> user@my-company.com.au. However my client's exchange is locked down
>> to prevent open relaying and also to filter any external messages
>> that come from *@my-company.com.au, hence the mailing list messages
>> are not delivered to any recipients within the domain. If I remove
>> the mail filtering, then their ISP (which runs nightly checks for
>> open relays etc) says it will suspend their service and possibly
>> blacklist them. Does anyone know of another way I can let the mailing 
>> list emails in
>> without putting their server at risk of being used as an open relay
>> or similar? Thanks. 


Relevant Pages

  • Re: March 29, 2006 total eclipse - IT admins WORST NIGHTMARE
    ... and NewsProxy is the answer for that. ... > Comcast news server. ... simply filters out what I dont want on the network. ... NewsProxy - Network level killfile and content filter for Usenet. ...
    (comp.security.firewalls)
  • Re: Getting rid of SMTP Q emails
    ... DWord for contentfilterstate to 1. ... That's too fun about restarting the SMTP service. ... I am going to whip this server in shape and get the SPAMMING under control. ... After you added connection filter provider you need to ...
    (microsoft.public.windows.server.sbs)
  • Re: Security Logs are hard to read
    ... But there are thousands of events in the security logs during this time. ... If I filter by the user name, ... Is the server box running on the SBS 2003 server? ... server status report for you to monitor the server to ensure the server ...
    (microsoft.public.windows.server.sbs)
  • Re: SMTP Connectors with massive queues .. How do i stop this?
    ... >report) to the sender. ... entitled: "Clean Up the Exchange ... >Drop connection if address matches filter ... >c) Default SMTP Server ...
    (microsoft.public.windows.server.sbs)
  • Re: content filter how to?
    ... able to filter over 40 different categories of sites. ... > total number of internet hours in a day, total number of internet hours in ... All these are features that are I think hard to find in other ... > not be more secure that the first version], and SuperScout Server which is ...
    (comp.security.firewalls)

Quantcast