Solved

Exchange 2010 Blocking External Mail IP Filter Only

Posted on 2014-02-16
2
404 Views
Last Modified: 2014-02-17
We have a client with an Exchange 2010 server which gets its email from 1 source - our external mail filter. It has worked for years fine but last week the EXCH system decided to start blocking the IP of the mail filter. Whilst it doesnt show up in the Blocked IP list - if I telnet to port 25 from any other system but the MX filter it is open. But when i telnet from the MX filter to port 25 it just shows nothing and then closes.

Every hour (appox) it opens up again (i can telnet from the MX filter fine) - and the MX filter can get some emails from the queue sent, but then blocks up again.

The system runs SP3. I have turned off all Anti Spam features of Exchange 2010, and also make change via the CLI -

Modify Default
-----------------
$a = Get-ThrottlingPolicy
$a | Set-ThrottlingPolicy -EwsMaxConcurrency 20
$a | Set-ThrottlingPolicy -EASMaxConcurrency 20
$a | Set-ThrottlingPolicy -MessageRateLimit 2000

Modify Rec Conn
------------------
Get-ReceiveConnector
Set ReceiveConnector "Windows SBS Internet Receive SERVER" -MaxInboundConnectionPercentagePerSource 30
-MessageRateLimit 2000
-MessageRateSource None

To no avail. When it is blocked i cant find anywhere in Exchange that tells me that it has blocked it - so I just dont know where to go from here. Ive routed email direct to them atm whcih is not the best option but at least gets them flowing.

So any thoughts ?
0
Comment
Question by:jamesj21
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 500 total points
ID: 39864078
The behaviour you are seeing is not what I would expect to see if Exchange was blocking it.
If Exchange blocks it you get Service Unavailable being returned.
Therefore I would be looking at a third party tool, AV, Antispam etc.

Simon.
0
 

Author Comment

by:jamesj21
ID: 39866165
Yep that was it - Kaspersky KES 10 was monitoring port25 and checking emails for Worms - which its not required to and I didnt know it did! So whitelisted the mail filter in KES and now fine. Also could see the blocks int the KES logs.

Thanks for the help.
0

Featured Post

SharePoint Admin?

Enable Your Employees To Focus On The Core With Intuitive Onscreen Guidance That is With You At The Moment of Need.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
It’s been over a month into 2017, and there is already a sophisticated Gmail phishing email making it rounds. New techniques and tactics, have given hackers a way to authentically impersonate your contacts.How it Works The attack works by targeti…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question