?
Solved

Exchange 2010 Blocking External Mail IP Filter Only

Posted on 2014-02-16
2
Medium Priority
?
410 Views
Last Modified: 2014-02-17
We have a client with an Exchange 2010 server which gets its email from 1 source - our external mail filter. It has worked for years fine but last week the EXCH system decided to start blocking the IP of the mail filter. Whilst it doesnt show up in the Blocked IP list - if I telnet to port 25 from any other system but the MX filter it is open. But when i telnet from the MX filter to port 25 it just shows nothing and then closes.

Every hour (appox) it opens up again (i can telnet from the MX filter fine) - and the MX filter can get some emails from the queue sent, but then blocks up again.

The system runs SP3. I have turned off all Anti Spam features of Exchange 2010, and also make change via the CLI -

Modify Default
-----------------
$a = Get-ThrottlingPolicy
$a | Set-ThrottlingPolicy -EwsMaxConcurrency 20
$a | Set-ThrottlingPolicy -EASMaxConcurrency 20
$a | Set-ThrottlingPolicy -MessageRateLimit 2000

Modify Rec Conn
------------------
Get-ReceiveConnector
Set ReceiveConnector "Windows SBS Internet Receive SERVER" -MaxInboundConnectionPercentagePerSource 30
-MessageRateLimit 2000
-MessageRateSource None

To no avail. When it is blocked i cant find anywhere in Exchange that tells me that it has blocked it - so I just dont know where to go from here. Ive routed email direct to them atm whcih is not the best option but at least gets them flowing.

So any thoughts ?
0
Comment
Question by:jamesj21
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 2000 total points
ID: 39864078
The behaviour you are seeing is not what I would expect to see if Exchange was blocking it.
If Exchange blocks it you get Service Unavailable being returned.
Therefore I would be looking at a third party tool, AV, Antispam etc.

Simon.
0
 

Author Comment

by:jamesj21
ID: 39866165
Yep that was it - Kaspersky KES 10 was monitoring port25 and checking emails for Worms - which its not required to and I didnt know it did! So whitelisted the mail filter in KES and now fine. Also could see the blocks int the KES logs.

Thanks for the help.
0

Featured Post

Will your db performance match your db growth?

In Percona’s white paper “Performance at Scale: Keeping Your Database on Its Toes,” we take a high-level approach to what you need to think about when planning for database scalability.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As tax season makes its return, so does the increase in cyber crime and tax refund phishing that comes with it
In-place Upgrading Dirsync to Azure AD Connect
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question