Now that I've finally purchased a spam filtering appliance as a front end to my Exchange 2003 I want to block inbound SMTP from all IPs other than the address that my appliance sends from. I've gone into my Default SMTP Virtual Server, Access, Connection, "Select which computers may access this virtual server" and told it to only accept from the IP of my spam device. The problem is that after doing that I can't access the server from other IPs to relay authenticated outbound mail. Is there a way to allow authenticated outbound SMTP while blocking all inbound SMTP from all IPs other than desired?

On Sat, 3 Dec 2011 00:13:12 +0000, Don Powell wrote: >Now that I've finally purchased a spam filtering appliance as a front end to my Exchange 2003 I want to block inbound SMTP from all IPs other than the address that my appliance sends from. I've gone into my Default SMTP Virtual Server, Access, Connection, "Select which computers may access this virtual server" and told it to only accept from the IP of my spam device. The problem is that after doing that I can't access the server from other IPs to relay authenticated outbound mail. Is there a way to allow authenticated outbound SMTP while blocking all inbound SMTP from all IPs other than desired? Add the other IP addresses (or networks) to the list. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

But the outbound authenticated smtp traffic is coming from Smartphones. I have no way of knowing what IP they will be using at any given time. I assume I could create a second SMTP Virtual Server on a port other than 25 and use that for the other SMTP needs but I was hoping there was a way to configure Exchange to block SMTP traffic except for user authenticated stuff?

On Sat, 3 Dec 2011 13:19:48 +0000, Don Powell wrote: >But the outbound authenticated smtp traffic is coming from Smartphones. Use ActiveSync. >I have no way of knowing what IP they will be using at any given time. I assume I could create a second SMTP Virtual Server on a port other than 25 and use that for the other SMTP needs but I was hoping there was a way to configure Exchange to block SMTP traffic except for user authenticated stuff? Not if you're going to deny access by using IP addresses. Your requirements conflict. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

Actually, this is becoming a quite common scenario, alot of spam engines are moving off server and into virtual appliances, I also need this as well, did you manage a solution?