Link to home
Start Free TrialLog in
Avatar of Optimus NZ
Optimus NZFlag for New Zealand

asked on

Microsoft Exchange Connection Control : Exchange 2003

Hi,

I've turned on Connection Control in Ex2k3 to only accept mail from one server, our spam filters server. It seems like it took a while for DNS to propagate and some mail tried to route direct to our server as the previous MX record suggested.

My question is, when the connection control is locked down like this, does it still generate NDR's or another reply or does the email just get dropped?

Thanks
Avatar of Glen Knight
Glen Knight
Flag of United Kingdom of Great Britain and Northern Ireland image

It depends how the sending system is configured.

What will happen if they try to connect to your server then will be declined a connection.  This will then sit in their delivery system for 48 hours (depending in configuration) at which stage an NDR will be produced.

Depending on their mail system they will also receive delivery delayed message
ASKER CERTIFIED SOLUTION
Avatar of DMTechGrooup
DMTechGrooup
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
If your server is only configured to accept connections from specific IP Addresses - server that try to connect to your server will not make a connection and will not be able to send mail through.  They will retry and eventually give up.  If the MX records have been changed too, then they shoud eventally pick up on the changes and send the mail to the new MX records.
DNS usually takes anything from 24 - 72 hours to replicate around the world properly.  This is quite normal and you would have been better off leaving your IP address restrictions open for 2-3 days maximum then closing them off, but what is done is done.
If people cannot email you - they will either retry or call to ask if you have problems.
No NDR's will be sent from your server - but their server may send a delay message and then an NDR message if they cannot reach you at all.
We should start a choir! :-O