Re: Unable to receive e-mail messages from certain sites with reve

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



I though I remembered this was different for Exchange Server so I found this
article. If you read this KB closely you will notice the Reverse DNS lookup
for Exchange SMTP VS does not actually block or restrict any message it just
merely performs the reverse lookup and the hostname is attached to the
headers of the email messages. So actually you are not blocking any Spam by
enabling this on your SMTP VS. Typically you will ned a third party tool
such as Vamsoft ORF Filter or have your ISP perfrom this for you if they
support it with SMTP Forwarding.

http://support.microsoft.com/kb/297412/

Vamsoft ORF Filter,
http://www.vamsoft.com/orf/orfee_features.asp

--
John Oliver, Jr.
MCSE, MCT, CCNA, Exchange MVP
Microsoft Certified Partner

"Allen Clark" <nospamacent1@xxxxxxxxxxxxxxxx> wrote in message
news:19A08B6A-4B39-4C32-9555-4C7112A0CAE0@xxxxxxxxxxxxxxxx
>I just checked my badmail and the missing messages are not in there. I
> turned off the check reverse DNS on incoming mail on the default SMTP
> server,
> restarted the default SMTP server and sent a test e-mail to one of the
> problem sites asking them for a reply. They can receive, but they are not
> able to save the message. I waited 15 minutes, then re-enabled the
> reverse
> DNS checking.
>
> Any more Ideas?
>
> Thanks,
> Allen
>
>
> --
> It sure would be nice if Microsoft had some sort of QA procedure on their
> white papers and KB articles!
>
>
> "John Oliver, Jr. [MVP]" wrote:
>
>> The only place I would think these messages would show up is in the Bad
>> Mail
>> Folder, have you checked it?
>>
>> --
>> John Oliver, Jr.
>> MCSE, MCT, CCNA, Exchange MVP
>> Microsoft Certified Partner
>>
>> "Allen Clark" <nospamacent1@xxxxxxxxxxxxxxxx> wrote in message
>> news:E490F23C-7E59-4262-B3CC-20A449176853@xxxxxxxxxxxxxxxx
>> > Thanks for the reply. I have verified that Symantec is NOT blocking
>> > ANY
>> > spam. Is there a way to have exchange log the messages that are
>> > trashed
>> > because of a failed reverse DNS lookup. I don't want to disable the
>> > reverse
>> > DNS lookup because I will be buried with questions from users saying
>> > "Why
>> > did
>> > I get all of these spam messages?" even if I send them all an e-mail
>> > indicating the test procedures being used.
>> >
>> > Simply put:
>> >
>> > Symantec is NOT blocking ANY spam.
>> >
>> > Is there a way to have Exchange log the messages that are being trashed
>> > due
>> > to failed reverse DNS lookup?
>> >
>> > Thanks in advance,
>> > Allen
>> >
>> > --
>> > It sure would be nice if Microsoft had some sort of QA procedure on
>> > their
>> > white papers and KB articles!
>> >
>> >
>> > "John Oliver, Jr. [MVP]" wrote:
>> >
>> >> I have you tried just disabling temporarily the Reverse DNS setting to
>> >> see
>> >> if the mail gets through? Also check your settings on the Symantec
>> >> Mail
>> >> Security as it maybe catching that mail as spam.
>> >>
>> >> --
>> >> John Oliver, Jr.
>> >> MCSE, MCT, CCNA, Exchange MVP
>> >> Microsoft Certified Partner
>> >>
>> >> "Allen Clark" <nospamacent1@xxxxxxxxxxxxxxxx> wrote in message
>> >> news:6E574CE7-1007-4CB9-B55C-1357A547A8F4@xxxxxxxxxxxxxxxx
>> >> > We have a simple Exchange 2000 configuration. One Exchange server
>> >> > 2000
>> >> > running on a single Windows 2000 server. DSL connection with static
>> >> > IP
>> >> > address, host, mx, and reverse DNS all properly configured.
>> >> > Firewall
>> >> > device
>> >> > that routes all SMTP traffic to the Exchange server from our public
>> >> > IP
>> >> > address. In order to cut down on the amount of SPAM received, we
>> >> > have
>> >> > enabled the reverse DNS checking to validate e-mail messages coming
>> >> > into
>> >> > our
>> >> > server. We also run the Symantec Enterprise Edition 10.0 AV which
>> >> > includes
>> >> > the Symantec Mail Security for Exchange. The problem we are
>> >> > experiencing
>> >> > is
>> >> > that a few senders are unable to send to our server from other
>> >> > sites.
>> >> > Our
>> >> > bank, ChevyChaseBank, and Pepco, both have individuals that have
>> >> > tried
>> >> > to
>> >> > send e-mail to us, but they never get thru. We can send to them
>> >> > without a
>> >> > problem, but they cannot reply or send to us. I have checked the
>> >> > SMS4E
>> >> > logs
>> >> > and have nothing enabled for antispam, only AV protection. The only
>> >> > protection we have for spam is the server setting to check reverse
>> >> > DNS.
>> >> > How
>> >> > can I go about troubleshooting this message. I had read that when a
>> >> > message
>> >> > fails reverse DNS lookup, it is deleted and there is nothing logged.
>> >> > Is
>> >> > this
>> >> > true? If not, where can I see what messages are being deleted due
>> >> > to
>> >> > the
>> >> > reverse DNS resolution failure?
>> >> >
>> >> > Thanks,
>> >> > Allen
>> >> >
>> >> > --
>> >> > It sure would be nice if Microsoft had some sort of QA procedure on
>> >> > their
>> >> > white papers and KB articles!
>> >>
>> >>
>> >>
>>
>>
>>


.



Relevant Pages

  • Re: Reverse DNS Lookup
    ... >>>How does reverse DNS lookup help SMTP in performing authentication? ... is in access lists on mail relays. ...
    (comp.security.misc)
  • Re: Excessive reverse lookups.
    ... I have read your intial post, and I understand that your Exchange server ... has sent lots of Reverse DNS lookup requests, ... I suggest you first check if you have enbled the "Perform Reverse DNS ...
    (microsoft.public.exchange2000.admin)
  • Re: Unable to receive e-mail messages from certain sites with reve
    ... Is there a way to have exchange log the messages that are trashed ... > because of a failed reverse DNS lookup. ... > I get all of these spam messages?" ... >>> that routes all SMTP traffic to the Exchange server from our public IP ...
    (microsoft.public.exchange2000.admin)
  • Re: Routing restrictions?
    ... the Exchange IMS does a reverse DNS lookup by default. ... Internet Mail Service Displays SMTP Banner Slowly ... that will not help here as Susan mentioned as the Exchange ...
    (microsoft.public.exchange.connectivity)
  • Re: How to stop inbound mail sent from invalid domains
    ... The exchange box is NAT'd by a firewall. ... the way VPN clients access exchange and that I have mutliple internet ... (exchange thinks the remote SMTP server is the firewall, basilcy, the ... the reverse DNS test will always return my internal domin name. ...
    (microsoft.public.exchange.admin)