Re: Ex2003 - SMTP Virtual Server - Connection and Relay restrictions

From: Michael Barta [MSFT] (mbarta_at_online.microsoft.com)
Date: 12/01/04


Date: Wed, 1 Dec 2004 16:56:00 -0600

If I deny an IP address from connecting, then I don't need to deny it from
relaying also, correct? Correct. It will not be able to make a connection to
relay the message.

And if I do allow an IP address to connect, but deny it from relaying, then
that IP address can only send mail to domains for which my Exchange org is
responsible for, correct? Correct, but be aware that if you limit your
exchange server to certain IPs, only those IPs can connect and the rest of
the servers on internet will have problems. This may not be a problem is all
mail comes in from a single server such as a spam/AV filter.

-- 
Michael Barta [MSFT]
Microsoft Exchange Support
Please do not send e-mail directly to this alias. This alias is for 
newsgroup purposes only.
This posting is provided "AS IS" with no warranties, and confers no rights.
"MartinHTN" <m@ht.n> wrote in message 
news:%23VRsTt%231EHA.3416@TK2MSFTNGP09.phx.gbl...
> Hello:
>
> I'm trying to clarify something. Under Default SMTP Virtual Server 
> Properties > Connection Control and Relay Restrictions. If I deny an IP 
> address from connecting, then I don't need to deny it from relaying also, 
> correct? And if I do allow an IP address to connect, but deny it from 
> relaying, then that IP address can only send mail to domains for which my 
> Exchange org is responsible for, correct?
>
> Thank you.
> -- 
> Sincerely,
> Martin
> 


Relevant Pages

  • Re: Printing Problems (2nd request)
    ... lpstat: Unable to connect to server: Connection refused ... # Encryption: whether or not to use encryption; ... got two printers connected, both of which used to work fine. ... Deny From All ...
    (Fedora)
  • apache2: includes filter error
    ... # Based upon the NCSA server configuration files originally by Rob McCool. ... # configuration directives that give the server its instructions. ... Deny from all ... AddCharset ISO-8859-1 .iso8859-1 .latin1 ...
    (Debian-User)
  • Re: I will show you mine if ...
    ... As I do have servers on the net, things are configured as a DMZ ... Since the bridge filter is not addressable, it can only deny ... DMZMAIL=IP address of the mail server ... Port definitions, as a range lowport-highport ...
    (comp.os.linux.security)
  • BUG IN APACHE HTTPD SERVER (current version 2.0.47)
    ... How to return files in a Apache Deny All directory. ... Apache Web Server allows manage configurations via the main ... the configuration comparing between two config ...
    (Bugtraq)
  • Re: Restrict incoming smtp by IP address
    ... MVP - Exchange ... If you are using a Third Party Filtering service you will need to lock ... down your Exchange Server to allow only connections from their filtering ... How to I say deny all with the deny button. ...
    (microsoft.public.exchange.admin)