Solved

Exchange 2010 Blocking External Mail IP Filter Only

Posted on 2014-02-16
2
401 Views
Last Modified: 2014-02-17
We have a client with an Exchange 2010 server which gets its email from 1 source - our external mail filter. It has worked for years fine but last week the EXCH system decided to start blocking the IP of the mail filter. Whilst it doesnt show up in the Blocked IP list - if I telnet to port 25 from any other system but the MX filter it is open. But when i telnet from the MX filter to port 25 it just shows nothing and then closes.

Every hour (appox) it opens up again (i can telnet from the MX filter fine) - and the MX filter can get some emails from the queue sent, but then blocks up again.

The system runs SP3. I have turned off all Anti Spam features of Exchange 2010, and also make change via the CLI -

Modify Default
-----------------
$a = Get-ThrottlingPolicy
$a | Set-ThrottlingPolicy -EwsMaxConcurrency 20
$a | Set-ThrottlingPolicy -EASMaxConcurrency 20
$a | Set-ThrottlingPolicy -MessageRateLimit 2000

Modify Rec Conn
------------------
Get-ReceiveConnector
Set ReceiveConnector "Windows SBS Internet Receive SERVER" -MaxInboundConnectionPercentagePerSource 30
-MessageRateLimit 2000
-MessageRateSource None

To no avail. When it is blocked i cant find anywhere in Exchange that tells me that it has blocked it - so I just dont know where to go from here. Ive routed email direct to them atm whcih is not the best option but at least gets them flowing.

So any thoughts ?
0
Comment
Question by:jamesj21
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 500 total points
ID: 39864078
The behaviour you are seeing is not what I would expect to see if Exchange was blocking it.
If Exchange blocks it you get Service Unavailable being returned.
Therefore I would be looking at a third party tool, AV, Antispam etc.

Simon.
0
 

Author Comment

by:jamesj21
ID: 39866165
Yep that was it - Kaspersky KES 10 was monitoring port25 and checking emails for Worms - which its not required to and I didnt know it did! So whitelisted the mail filter in KES and now fine. Also could see the blocks int the KES logs.

Thanks for the help.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
As tax season makes its return, so does the increase in cyber crime and tax refund phishing that comes with it
how to add IIS SMTP to handle application/Scanner relays into office 365.
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…

735 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question