Stop messages from server
In our domain we have several servers set up like this: Server > IIS SMTP Relay > Exchange or Perimeter Gateway The server sends out SMTP mail for various reasons (alerts, notifications etc). If the mail is for a Exchange user, then then it's routed to Exchange by the IIS Relay, if it's for an external user then it goes to the Perimeter Gateway then the Internet. One of the servers has gone berserk and is sending out thousands of emails to Exchange users. I want to block messages entering Exchange ASAP. I guess I need some sort of Transport rule on the Hub Transports to reject messages from server1.domain.com? Does anyone know how to do this?
February 14th, 2011 3:37pm

If you want to block strictly from the Exchange side, I would remove the allowed ip address of the IIS SMTP Relay from the receive connector that is used to accept those messages. You could also block by ip on the IIS SMTP side and block that server from relaying to anyone.
Free Windows Admin Tool Kit Click here and download it now
February 14th, 2011 4:20pm

Good idea! Done... Also, out of interest, is it possible to set Hub Transport rules saying, if message is from sender@xxx or from a particular host to block messages too? Do you know how I would do that?
February 14th, 2011 5:04pm

Oh sure, you can do that as well. If you walk through the hub trans rule wizard, you can see all the possibilities. Blocking from a specific server I dont think is possible however. http://www.msexchange.org/tutorials/Transport-Rules-Exchange-Server-2007.html
Free Windows Admin Tool Kit Click here and download it now
February 14th, 2011 5:38pm

On Mon, 14 Feb 2011 20:30:40 +0000, TomD1976 wrote: > > >In our domain we have several servers set up like this: > >Server > IIS SMTP Relay > Exchange or Perimeter Gateway > >The server sends out SMTP mail for various reasons (alerts, notifications etc). If the mail is for a Exchange user, then then it's routed to Exchange by the IIS Relay, if it's for an external user then it goes to the Perimeter Gateway then the Internet. > >One of the servers has gone berserk and is sending out thousands of emails to Exchange users. I want to block messages entering Exchange ASAP. Why not just remove the relay from the IIS SMTP config? Deal with the problem at the source! >I guess I need some sort of Transport rule on the Hub Transports to reject messages from server1.domain.com? Does anyone know how to do this? There's not enough information about how the Exchange receive connector is configured to tell you what you need to do on Exchange. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP
February 14th, 2011 5:50pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics