Solved

Exchange 2010 Blocking External Mail IP Filter Only

Posted on 2014-02-16
2
407 Views
Last Modified: 2014-02-17
We have a client with an Exchange 2010 server which gets its email from 1 source - our external mail filter. It has worked for years fine but last week the EXCH system decided to start blocking the IP of the mail filter. Whilst it doesnt show up in the Blocked IP list - if I telnet to port 25 from any other system but the MX filter it is open. But when i telnet from the MX filter to port 25 it just shows nothing and then closes.

Every hour (appox) it opens up again (i can telnet from the MX filter fine) - and the MX filter can get some emails from the queue sent, but then blocks up again.

The system runs SP3. I have turned off all Anti Spam features of Exchange 2010, and also make change via the CLI -

Modify Default
-----------------
$a = Get-ThrottlingPolicy
$a | Set-ThrottlingPolicy -EwsMaxConcurrency 20
$a | Set-ThrottlingPolicy -EASMaxConcurrency 20
$a | Set-ThrottlingPolicy -MessageRateLimit 2000

Modify Rec Conn
------------------
Get-ReceiveConnector
Set ReceiveConnector "Windows SBS Internet Receive SERVER" -MaxInboundConnectionPercentagePerSource 30
-MessageRateLimit 2000
-MessageRateSource None

To no avail. When it is blocked i cant find anywhere in Exchange that tells me that it has blocked it - so I just dont know where to go from here. Ive routed email direct to them atm whcih is not the best option but at least gets them flowing.

So any thoughts ?
0
Comment
Question by:jamesj21
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 500 total points
ID: 39864078
The behaviour you are seeing is not what I would expect to see if Exchange was blocking it.
If Exchange blocks it you get Service Unavailable being returned.
Therefore I would be looking at a third party tool, AV, Antispam etc.

Simon.
0
 

Author Comment

by:jamesj21
ID: 39866165
Yep that was it - Kaspersky KES 10 was monitoring port25 and checking emails for Worms - which its not required to and I didnt know it did! So whitelisted the mail filter in KES and now fine. Also could see the blocks int the KES logs.

Thanks for the help.
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As cyber crime continues to grow in both numbers and sophistication, a troubling trend of optimization has emerged over the last year.
Sometimes clients can lose connectivity with the Lotus Notes Domino Server, but there's not always an obvious answer as to why it happens.   Read this article to follow one of the first experiences I had with Lotus Notes on a client's machine, my…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question