RE: Filtering

  • From: "Jeffrey Robillard" <jrobill@xxxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Wed, 13 Nov 2002 15:38:52 -0500

in outlook if you right click once and then choose 'options' for an email 
message you can see how the message was bounced around from smtp server to smtp 
server before it arrived at yours.

for example
Microsoft Mail Internet Headers Version 2.0
Received: from barbados.dlbnetwork.net ([63.215.87.37] RDNS failed) by x.x.x 
with Microsoft SMTPSVC(5.0.2195.4905);
         Tue, 12 Nov 2002 22:05:23 -0500
Received: from maui.dlbnetwork.net (63.215.87.100) by barbados.dlbnetwork.net 
(PowerMTA(TM) v1.6a19); Tue, 12 Nov 2002 19:04:57 -0800 (envelope-from 
<RBB-2717-59069166@xxxxxxxxxxxxxxxxxxx>)
Message-ID: <1037155250.20388@xxxxxxxxxxxxxxxxxxx>
Content-Transfer-Encoding: 8bit
Content-Type: multipart/alternative; boundary="_-


Am I limited to putting only the smtp server that eventually sent it to mine in 
the block/deny area, or can I put the other one in as well and get the same 
affect.   In the above example if I were to not allow messages from 
63.215.87.100 in the deny list would I have not received the message?   Is 
exchange smart enought to know that if that mail server ever laid its hands on 
it... then I don't want it?

Thanks.


-----Original Message-----
From: Jeffrey Robillard 
Sent: Wednesday, November 13, 2002 3:15 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Filtering


http://www.MSExchange.org/

that is the info I needed.  I already have filtering setup and working fine... 
it was the IP block/deny that I need.  Thanks.

-----Original Message-----
From: Mark Fugatt [mailto:mark@xxxxxxxxx]
Sent: Wednesday, November 13, 2002 10:06 AM
To: [ExchangeList]
Subject: [exchangelist] RE: Filtering


http://www.MSExchange.org/

Assuming we are talking about Exchange 2000

http://www.msexchange.org/tutorials/Blocking_Incoming_Mail_Using_Microsoft_E
xchange_2000.html

Now, if you know the IP address of the server that sent the message you can
also into the properties for your SMTP Virtual Server > Access > Connections
and you can add the offending server to the list of computers that you want
to reject connection attempts from.

Mark Fugatt
Pentech Office Solutions Inc
www.4mcts.com
www.exchangetrainer.com
Tel:  585 586 3890
Fax: 585 249 0316
Cell: 585 576 4750
Visit www.msexchange.org for valuable information about Microsoft Exchange


-----Original Message-----
From: Brandon F. Lockhart [mailto:blockhart@xxxxxxxxxxxxxxxxx]
Sent: Wednesday, November 13, 2002 9:54 AM
To: [ExchangeList]
Subject: [exchangelist] RE: Filtering


http://www.MSExchange.org/

Where is the configuration to filter out entire domains?

-----Original Message-----
From: ONG Liang Bu (CSC) [mailto:lbong@xxxxxxxxxx]
Sent: Wednesday, November 13, 2002 09:12
To: [ExchangeList]
Subject: [exchangelist] RE: Filtering


http://www.MSExchange.org/

The From field can be faked.  Normally for me I open up the mail in
Outlook click on "View" and go to "Options" to look at the
email envelope.  You should see which smtp server that is sending these
junk.  For me I just block the domain from the smtp address.

Not foolproof, one time I actually block a ISP in UK.. Ha Ha .. and my
user scream at me because her brother is using that ISP...

-----Original Message-----
From: Jeffrey Robillard [mailto:jrobill@xxxxxxxxxxxxx]
Sent: Wednesday, November 13, 2002 10:08 PM
To: [ExchangeList]
Subject: [exchangelist] Filtering


http://www.MSExchange.org/

We use the built in exchange filtering quite heavily to block the tons
of garbage email we get.  Adding 5-10 new filters every day is a pain,
but its worth it in the long run.

yesterday I received a new group of junk mails from a source labeled
as.. [%%email.addr%%]

How do I add this kind of completely invalid email address to the filter
list... and isn't exchange supposed to weed   this invalid garbage out
anyway?

There is no @ sign in the address so I have no idea how to label it in
the filter list.

Thanks

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/ Windows
2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
lbong@xxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/ Windows
2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
blockhart@xxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
mark@xxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')




------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as: 
jrobill@xxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as: 
jrobill@xxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: