Hello, I would like to know how I could check whether an IP has been rejected, blocked etc.. on the edge servers?? I though about: Get-AgentLog –StartDate "01/05/2010" | where {$_.IPAddress -eq "100.200.XX0.XX8" But I don't manage to getif the IP has passed successfuly though my organization or not (Knowing the Action and Reason would be a plus). Thanks, Graig

Hi Graiggoriz, Have you add some ip address into the "ip block list" in your exchange server. If you want to check them you could use the EMC. Per my known, if you use get-agentlog it would show the email information as below: Timestamp SessionId IPAddress MessageId P1FromAddress P2FromAddresses Recipients Agent Event Action SmtpResponse Reason ReasonData Diagnostics The action would show the email seesion whether passed successfully or not. Regards! gavin

Thank Gavin. In fact, I have user coming up with outside clients NDR saying that their IP has been blocked. I usualy try to get the client's NDR and I check the header to check their IP. I wanted to run a shell command to check whether the blocked IP has been blocked at some stage (and get the following info regarding the IP blocked: date, time, send, recipient etc..). I also was wondering that if you "whitelist" IP does the email still could be filtered as a spam and antivus check or it goes through your organization without being checked? Graig

Hi Graiqqoriz, First of all, I want to verify what about the outside clients? do yo mean your own domain user from outside or other domain users? That is, what about the email, does it send out from your domain or send in your domain. Do you check the "ip block list" in your edge server? Do you have other rule blocking some special ip addresses? You also could check the bolcked email through the tracking log. Regards! gavin

I meant by outside client = other domain users (it is other companies sending emails to my organization). I do check the Ip block list but sometimes I have loads of IPs and I wanted to use a shell command to check whether my organization has blocked/reject the client's IP. We don't have ther tule that would block special IP @. We do it ourself when we have spam and pass the IP as green when it regards a client of us (another company). Graig

Hi Graig, Please run below command: get-agentlog -start "time" -end "time" | select-object ipaddress,action | where {$_.ipaddress -eq "specialaddress"} | ft It would list the blocked ip address. NOTE the time and specialaddress is your needs. Regards! gavin

It looks like you answer my post :-D !! I´ll check that up tomorrow and get back to you !! Thanks Gavin, Graig