Re: Excessive reverse lookups.
From: Yor Suiris (yor_at_hallgroupNOT.net)
Date: 09/13/04
- Next message: Patrick: "Mailbox GUID"
- Previous message: Mohammed Alli: "Re: PTR record problem with comcast isp"
- In reply to: Alan Sun [MSFT]: "RE: Excessive reverse lookups."
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 13 Sep 2004 11:56:37 -0400
OK Alan, How does Reverse DNS lookup stop spam on Exchange? I really want to
know. All I see reverse DNS do on MS Exchange is add the IP info to the
tracking logs. It does not deny anything.
"Alan Sun [MSFT]" <v-asun@online.microsoft.com> wrote in message
news:5yRunNWmEHA.3608@cpmsftngxa10.phx.gbl...
> Hello Jim,
>
> Thanks for your posting here.
>
> According to your situation, I suggest you first check the Reverse DNS
> Lookup option on Exchange server. The "Perform Reverse DNS Lookup for
> Incoming Messages" option is located on the "Default Virtual SMTP Server
> Properties" dialog box: On the Delivery tab, click Advanced.
>
> More info here:
> 297412 The "Perform Reverse DNS Lookup for Incoming Messages" Option Is
for
> http://support.microsoft.com/?id=297412
>
> To prevent spam, you can use the following methods
>
> -- Prevent Relaying
> -- Configure IP Address Restrictions
> -- Implement Authentication
> -- Set Message Limits
> -- Use Reverse DNS Lookup
> -- Configure the SMTP Connector
>
> For more information, look into the instructions in the following
document:
> 319356.KB.EN-US HOW TO: Prevent Unsolicited Commercial E-Mail in Exchange
> 2000 Server
> http://support.microsoft.com/default.aspx?scid=KB;EN-US;319356
>
> In addition, there are some third-party tools which provide this kind of
> function. You can look into the following link:
>
> http://www.slipstick.com/addins/content_control.htm
>
> ============
> Warning: This response contains a reference to a third party World Wide
Web
> site. Microsoft is providing this information as a convenience to you.
> Microsoft does not control these sites and has not tested any software or
> information found on these sites; therefore, Microsoft cannot make any
> representations regarding the quality, safety, or suitability of any
> software or information found there. There are inherent dangers in the use
> of any software found on the Internet, and Microsoft cautions you to make
> sure that you completely understand the risk before retrieving any
software
> from the Internet.
> ============
>
> Hope this helps! If you need further help or have other concerns, just
post
> back to let me know. Thanks and have a nice day!
>
> Thanks & Regards
> Alan Sun
> Microsoft Online Partner Support
>
> Get Secure! - www.microsoft.com/security
> =====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================
>
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
>
>
> --------------------
> |From: "jim" <jim@NOSPAM.com>
> |Subject: Excessive reverse lookups.
> |Date: Fri, 10 Sep 2004 09:30:36 -0400
> |Lines: 19
> |X-Priority: 3
> |X-MSMail-Priority: Normal
> |X-Newsreader: Microsoft Outlook Express 6.00.2800.1437
> |X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
> |Message-ID: <eB4OcpzlEHA.1644@tk2msftngp13.phx.gbl>
> |Newsgroups: microsoft.public.exchange2000.admin
> |NNTP-Posting-Host: pat.axcelis.com 12.146.8.100
> |Path:
>
cpmsftngxa10.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13
> phx.gbl
> |Xref: cpmsftngxa10.phx.gbl
microsoft.public.exchange2000.admin:111202
> |X-Tomcat-NG: microsoft.public.exchange2000.admin
> |
> |We've been warned by our ISP that our two SMTP gateways are
> performing an
> |excessive amount of reverse lookups and hammering their dns servers.
> We
> |DON'T have that feature turned on in the virtual smtp server
> properties
> |(deliver > advanced > configure..). The only thing i see on our
side
> are
> |all the bounced spam messages sitting in our queues undeliverable.
> It seems
> |like we get a huge volume of spam (far more spam than legitimate),
> but i'm
> |not sure that it's any higher than most other companies. In any
> event,
> |we're in Ex2K native mode, SP3 on all servers.
> |
> |Can this lookup problem be addressed without adding a third party
spam
> |filter? Are there any registry tweaks that can reduce the volume of
> |lookups? We have relaying turned off. We try to filter a fair
> number of
> |subnets using spamhaus as a reference...
> |
> |Any advice/help is appreciated.
> |
> |
> |
> |
> |
>
- Next message: Patrick: "Mailbox GUID"
- Previous message: Mohammed Alli: "Re: PTR record problem with comcast isp"
- In reply to: Alan Sun [MSFT]: "RE: Excessive reverse lookups."
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|