Need help from Exchange Experts

[azev]

Just found out today that most of isp dynamic ip address are blocked from freely sending email on the internet. (Most corporate email blocked email originating from dynamic ip address)

Here's a sample of the error message:

Your message did not reach some or all of the intended recipients.

Subject: Testing
Sent: 2/28/2005 4:27 AM

The following recipient(s) could not be reached:

xxx@xxxx.com on 2/28/2005 4:27 AM
You do not have permission to send to this recipient. For assistance, contact your system administrator.
<exchangeserver.mydomain.com #5.7.1 smtp;550 5.7.1 Rejected: 24.20.41.57 listed at rbl-plus.mail-abuse.org>

Since my ip address is block, I thought if I can use my isp smtp server as a relay server, problem is solved. Unfortunately Exchange2003 does not provide any means of entering username/password to connect to isp smtp server. I've search for a solution for 2 days now, but come to a road block. Does anyone here have a solution for my problems?
I'd like to hear any possible solution, even if it means adding another computer as an smtp gateway.

Thanks Guys

 

[Fardringle]

Originally posted by: azev
<exchangeserver.mydomain.com #5.7.1 smtp;550 5.7.1 Rejected: 24.20.41.57 listed at rbl-plus.mail-abuse.org>

This line is the significant one. It indicates that your IP address (or your whole ISP) has been flagged as a source of email abuse/spam by rbl-plus.mail-abuse.org. To fix the problem you will need to either:

1) Contact your ISP and ask them to file a request to be removed from the abuse list.
2) Contact your ISP and get an IP address in a different subnet that is not on the abuse list.
3) Contact mail-abuse.org directly and ask them to remove your IP from the list.
4) Use a mail redirector that is not on the spam abuse list.
5) I'm sure there is probably something else I could put here but I can't think of it at the moment.

 

[loup garou]

Originally posted by: Fardringle

Originally posted by: azev
<exchangeserver.mydomain.com #5.7.1 smtp;550 5.7.1 Rejected: 24.20.41.57 listed at rbl-plus.mail-abuse.org>

This line is the significant one. It indicates that your IP address (or your whole ISP) has been flagged as a source of email abuse/spam by rbl-plus.mail-abuse.org. To fix the problem you will need to either:

1) Contact your ISP and ask them to file a request to be removed from the abuse list.
2) Contact your ISP and get an IP address in a different subnet that is not on the abuse list.
3) Contact mail-abuse.org directly and ask them to remove your IP from the list.
4) Use a mail redirector that is not on the spam abuse list.
5) I'm sure there is probably something else I could put here but I can't think of it at the moment.

None of this will help though, because he's being BL'd for sending mail from a dynamic IP.

Azev:
WHat you're looking for is called an SMTP smart host. Here's some 2k instructions on how to set it up, I believe it will be exactly the same for 2k3. You can also look at dynDNS's mailhop service.

 

[Fardringle]

Yes and no...

I have never used anything but dynamic IP addresses from home and have only once ever been blocked by any corporate email servers, and that one case was because of an idiot ISP customer that had been spamming people. As soon as that issue was cleared up with the mail abuse list I had no more problems sending email from that IP address for the two months that I had the address...


edit: The SMTP smart host that Werk posted would probably be the easiest resolution since you won't have to deal with the bureacracy of getting your IP/ISP off of the abuse list.

 

[azev]

You guys are awsome, that was the best guide to implement smarthost .
I got my server running the way I wanted, until............. I added another gateway for virus check. The problem now is that only email destined to the ouside world is send through the gateway. I want every email, including the one destined to another mailbox in the same information store to be forwarded to the smarthost for screening. Is this possible ???

Thanks

 

[loup garou]

Glad you got everything working the way you wanted.

I'd suggest just getting the appropriate amount of licenses of TrendMicro ScanMail for Exchange. It'll scan everything that passes through exchange -- internal, external, incoming, outgoing...check out the free trial on their site.

 

[azev]

actually we're evaluating GFI mail security and Mail Essential right now. The exchange server has norton antivirus exchange edition installed, but we want to have an additional layer of antivirus/spam filtering with GFI smarthost.

 

[loup garou]

Originally posted by: azev
actually we're evaluating GFI mail security and Mail Essential right now. The exchange server has norton antivirus exchange edition installed, but we want to have an additional layer of antivirus/spam filtering with GFI smarthost.

I can't say I've ever tried routing internal mail to an external gateway then back in before, so I don't know what to tell you. What if you used one product strictly for internal virus scanning and continued evaluating GFI for external scanning?

 

[azev]

Originally posted by: werk

Originally posted by: azev
actually we're evaluating GFI mail security and Mail Essential right now. The exchange server has norton antivirus exchange edition installed, but we want to have an additional layer of antivirus/spam filtering with GFI smarthost.

I can't say I've ever tried routing internal mail to an external gateway then back in before, so I don't know what to tell you. What if you used one product strictly for internal virus scanning and continued evaluating GFI for external scanning?

I guess I can do that, but I am still curious about finding ways to forward internal mail to a smarthost .