Announcement

Collapse
No announcement yet.

Recipient filter not stopping all

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Recipient filter not stopping all

    I did search and didn't find any useful information. Sorry if this is a repost.

    I ran into the familiar "[email protected]" messages in the SMTP queues last week, followed the steps recommended by Microsoft, and configured the tarpit feature. Everything is working great except that I still see a domain stuck in the "retry" state with messages from "[email protected]". I have deleted the messages, but they appear again with a few hours.

    We are running Exchange 2003, I have the blacklist feature enabled on our firewall, and I am almost positive I followed the Microsoft instructions correctly. (filter recipients who aren't in the directory)

    Thanks in advance,

    Tim

  • #2
    Re: Recipient filter not stopping all

    Have you enabled the filter on the SMTP virtual server and then restarted the SMTP Server service? Enabling the Filter Recipients option is not enough.

    http://www.amset.info/exchange/filter-unknown.asp

    Simon.
    --
    Simon Butler
    Exchange MVP

    Blog: http://blog.sembee.co.uk/
    More Exchange Content: http://exchange.sembee.info/
    Exchange Resources List: http://exbpa.com/
    In the UK? Hire me: http://www.sembee.co.uk/

    Sembee is a registered trademark, used here with permission.

    Comment


    • #3
      Re: Recipient filter not stopping all

      Thanks for the reply. Yes, I enabled it on the SMTP virtual server as well as checking the option and restarting the service. It seems to be only one or two domains that are continuing to have [email protected] in the retry state...

      Comment


      • #4
        Re: Recipient filter not stopping all

        If those messages were already in the queue being processed by Exchange then I would expect that to happen. You need to wait 48 hours for the queues to flush out completely.

        Simon.
        --
        Simon Butler
        Exchange MVP

        Blog: http://blog.sembee.co.uk/
        More Exchange Content: http://exchange.sembee.info/
        Exchange Resources List: http://exbpa.com/
        In the UK? Hire me: http://www.sembee.co.uk/

        Sembee is a registered trademark, used here with permission.

        Comment


        • #5
          Re: Recipient filter not stopping all

          Those messages were deleted from the queues when I enabled the filter over 2 weeks ago. I also enabled tar pitting and rebooted. I am still seeing messages stuck in retry with [email protected] firewall will drop connections from any IP that is blacklisted as well. Any other ideas? Things to check?

          Thank you

          Comment


          • #6
            Re: Recipient filter not stopping all

            After you made the change, did you restart the SMTP Server Service?
            Do you have [email protected] email address on its own account or another account?

            Simon.
            --
            Simon Butler
            Exchange MVP

            Blog: http://blog.sembee.co.uk/
            More Exchange Content: http://exchange.sembee.info/
            Exchange Resources List: http://exbpa.com/
            In the UK? Hire me: http://www.sembee.co.uk/

            Sembee is a registered trademark, used here with permission.

            Comment


            • #7
              Re: Recipient filter not stopping all

              I rebooted the server after making the change. Is that not the same as restarting the SMTP service? The [email protected] email address is under another username.

              Thank you very much for your help!

              Comment


              • #8
                Re: Recipient filter not stopping all

                Rebooting the server is just the same - as the service has been restarted.
                Have you tested it yourself using telnet?

                Simon.
                --
                Simon Butler
                Exchange MVP

                Blog: http://blog.sembee.co.uk/
                More Exchange Content: http://exchange.sembee.info/
                Exchange Resources List: http://exbpa.com/
                In the UK? Hire me: http://www.sembee.co.uk/

                Sembee is a registered trademark, used here with permission.

                Comment


                • #9
                  Re: Recipient filter not stopping all

                  Excuse my ignorance but what would you like me to test via telnet? Thanks for the help!

                  Comment


                  • #10
                    Re: Recipient filter not stopping all

                    This is my instructions for the telnet test.
                    http://www.amset.info/exchange/telnet-test.asp

                    When you are doing a telnet test you will need to replace the from address with an invalid user.

                    Simon.
                    --
                    Simon Butler
                    Exchange MVP

                    Blog: http://blog.sembee.co.uk/
                    More Exchange Content: http://exchange.sembee.info/
                    Exchange Resources List: http://exbpa.com/
                    In the UK? Hire me: http://www.sembee.co.uk/

                    Sembee is a registered trademark, used here with permission.

                    Comment


                    • #11
                      Re: Recipient filter not stopping all

                      When I entered:

                      rcpt to:[email protected]

                      I received the following:

                      500 5.3.3 Unrecognized command

                      Comment


                      • #12
                        Re: Recipient filter not stopping all

                        Either you haven't entered the commands correctly (remember you cannot use backspace or any other changes to the characters entered) or something else is wrong. You should have got something like this:


                        220 mail.domain.net Microsoft ESMTP MAIL Service, Version: 6.0.3790.3959 ready at
                        Thu, 25 Oct 2007 21:07:06 +0100
                        ehlo
                        250-mail.domain.net Hello [192.168.3.102]
                        250-TURN
                        250-SIZE
                        250-ETRN
                        250-PIPELINING
                        250-DSN
                        250-ENHANCEDSTATUSCODES
                        250-8bitmime
                        250-BINARYMIME
                        250-CHUNKING
                        250-VRFY
                        250-X-EXPS GSSAPI NTLM LOGIN
                        250-X-EXPS=LOGIN
                        250-AUTH GSSAPI NTLM LOGIN
                        250-AUTH=LOGIN
                        250-X-LINK2STATE
                        250-XEXCH50
                        250 OK
                        mail from:[email protected]
                        250 2.1.0 [email protected]er OK
                        rcpt to:[email protected]
                        550 5.1.1 User unknown


                        Simon.
                        --
                        Simon Butler
                        Exchange MVP

                        Blog: http://blog.sembee.co.uk/
                        More Exchange Content: http://exchange.sembee.info/
                        Exchange Resources List: http://exbpa.com/
                        In the UK? Hire me: http://www.sembee.co.uk/

                        Sembee is a registered trademark, used here with permission.

                        Comment

                        Working...
                        X