IMF and Connection Filtering

We have an outside spam filtering service for our emails. Our MX records point to the spam filter and then the spam filter points to our mail server.

The outside spam filter wasn't doing a good enough job keeping the spam away. So, I set up the IMF filter on our exchange 2003 server.

The problem is that now we get have one or two email addresses that get blocked by our IMF that shouldn't. Of course, there is no whitelist built in to IMF so to pass false-positives through the IMF I either need a 3rd party tool or I need to use connection filtering.

I've used a few applications for whitelisting like IMFcompanion. It seems like none of them run as a service so as soon as I log out of the server the application closes and the whitelisting functionality stops.

Because of this I decided to try using connection filtering. But the emails are still getting blocked. I'll post the steps that I've taken to configure the connection filtering with hopes that maybe you will catch something that I'm missing.

1) open ESM and go to message delivery > Properties > Connection Filtering > Accept
2) type in the sending server's ip for the blocked emails, 67.50.177.26
3) go to SMTP virtual server > Properties > General > Advanced > Edit
4) I have checked:
                                 Apply Recipient Filter
                                 Apply Sender ID Filter
                                 Apply Intelligent Message Filter
                                 Apply Connection Filter
5) click Ok a few times to finish
6) restart SMTP service.

I've attached an email header from one of the blocked emails that shows the IP address of the blocked email server.
email-header.txt
LVL 2
David11011Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

fgrushevskyCommented:
The connection filtering would not work for you.

It is designed not to accept connections from unwanted IPs, but all your connections are coming from external spam filtering provider.
You should also check that your firewall is configured to only allow connections from  external spam filtering provider to your Exchange server and there is no possibility for direct connection from any internet host to your Exchange (the spammers don't follow mx records)
0
David11011Author Commented:
Then does anyone happen to know of any good whitelisting utilities I can try out for our IMF on the mailserver?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.