Solved

Exchange serve configuration - require FQDN in SMTP address

Posted on 2006-10-26
5
211 Views
Last Modified: 2010-03-06
Good morning:

We are currently running an Exchange 2003 server and I wanted to force messages created by some of our automated tools to use the FQDN or fail.  For example, you can telnet on port 25 and send a message as follows:

telnet ... 25
ehlo
250 OK
mail from:rscholl
250 2.1.0 rscholl@metratech.com....Sender OK
rcpt to:rscholl
250 2.1.5 rscholl@metratech.com
data
354 Please start mail input.
subject:<test>
all bad, sender was not FQ
.
250 Mail queued for delivery.
quit
221 Closing connection. Good bye.

The question is:  Does enabling the reverse DNS resolve the issue?  Is there a more elegant method?  What else is affected in the process?

Thanks in advance,

ray
0
Comment
Question by:MetraTechIT
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
5 Comments
 
LVL 104

Accepted Solution

by:
Sembee earned 250 total points
ID: 17829355
The reverse DNS option in Exchange is close to useless. It doesn't enforce anything, except write a line in the header that reverse DNS failed. I don't think I have it enabled on any of my sites.

You would have to use a third party tool that can do reverse DNS lookups and drop the connection if it doesn't match or isn't valid.

This will of course have an impact on all of your email - as you will need to implement it on all SMTP Connections to be of any use. That could mean you are dropping valid email messages. If you do deploy a solution, make sure that you create text in the NDR message that is sent back that explains why the connection was dropped.

Simon.
0
 

Author Comment

by:MetraTechIT
ID: 17833458
OK, so can anyone suggest the best solution for forcing FQDN in the SMTP from address?
0
 
LVL 104

Expert Comment

by:Sembee
ID: 17834654
Its a standard anti-spam technique, so any tool of that type should be able to do it. I believe that GFI Mail Essentials can do that test, as can ORF from Vamsoft.

Simon.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Utilizing an array to gracefully append to a list of EmailAddresses
Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question