0

I have implemented a new Exchange 2007 server running on Server 2008 in our domain. We previously used Exchange 2003 running on Server 2003 and I had locked the Default SMTP Connector down so that it would only accept message from a range of IP addresses provided by MX Logic. For those who don't know, MX Logic provides spam filtering services, like Postini.

I have added the MX Logic IP addresses to the IP Allow List under Server Configuration > Hub Transport. My question is, how do I tell the Exchange server to deny messages from all other IP addresses that are not explicitly defined in the IP Allow List?

If it matters, this server is the Client Access Server and Hub Transport server. We do not have an Edge Transport server in the organization.

Kyle Noland
  • 1,039
  • 3
  • 19
  • 21

3 Answers3

1

I think I went the wrong way with the previous answer.

Setup a receive connector on your Hub that allows anonymous connection (presumable this is done if you are receiving mail though MX Logic). If you are using only one receive connector, then you will need to create a new one - one which allows anonymous users and the other which does not.

On the properties of that anonymous receive connector, go to the Network tab and edit the field "Receive mail from remote servers that have these IP addresses:".

Add only MX Logic IPs in there, and possibly any boxes on your local network that need to send SMTP with unauthenticated connections.

Doug Luxem
  • 9,612
  • 7
  • 50
  • 80
0

Set the Block List Range from 0.0.0.0-255.255.255.255. It will ignore everything in the Allow List. Just make sure you include your internal network in the allow list.

Alan Samuel
  • 1
-1

Is there a reason you do not have an Edge Transport? That has the integrated IP Block / Allow list functionality built in to it.

If you want to stay without it, you can always add a set of firewall rules for TCP/25 inbound to the Windows Server 2008 firewall (which is VERY nice, relative to previous built in firewalls).

Adam
  • 554
  • 2
  • 5
  • My organization will not pay for an Edge Tranport server. – Kyle Noland Aug 19 '09 at 18:59
  • "In Exchange 2007 Service Pack 1 (SP1), you manage the IP Allow list and IP Block list on the Anti-Spam tab of the Hub Transport node under Server Configuration in the Exchange Management Console. You manage other anti-spam agent functionality, such as enabling and disabling the IP Allow lists and IP Block lists, and IP Allow List providers and IP Block List providers on the Anti-Spam tab of the Hub Transport node under Organization Configuration in the Exchange Management Console." From: http://technet.microsoft.com/en-us/library/bb123801.aspx – Adam Aug 19 '09 at 19:22