RBL - Creating a connection filter

rileymartin · Joined: 17 Feb 2008 Posts: 10

I'm following KB Article 823866 and I'm confused over the following paragraph:

Create a connection filter
To create a connection filter in Exchange 2003, follow these steps: 1. Start
Exchange System Manager.
2. Expand Global Settings, right-click Message Delivery, and then click
Properties.
3. Click the Connection Filtering tab.
4. To create a connection filter rule, click Add.
5. In the Display Name box, type a name for the connection filter.
6. In the DNS Suffix of Provider box, type the DNS suffix that the provider
appends to the IP address.
7. In the Custom Error Message to Return box, type a custom error message to
return to the sender.

What DNS suffix are they talking about??? Are they saying that I have to
create a connection filter for every major email system on the Internet that
my company communicates with? Any help would be appreciated from anyone that
has implemented connection filtering. Thanks.

Archived from group: microsoft>public>exchange>setup

Bharat Suneja [MVP] · Joined: 05 Aug 2007 Posts: 1043

The verbiage on that KBA could be confusing... what you're doing is
configuring the Connection Filter with a Real-time Block List (RBL).
It's not done for every mail system on the internet - you only need to do
this if you want to use a RBL.
For instance, if you wanted to use the Zen list from Spamhaus, the DNS
suffix is zen.spamhaus.org.
http://www.spamhaus.org/zen/index.lasso

The link above also explains what the different return codes (since this is
a DNS lookup, the "codes" returned look like IP addresses - e.g. 127.0.0.2)
mean. You can decide whether you want to drop mail for all codes returned,
or only some of them.

Similarly, if you decide to use other RBLs, you would need to get their DNS
suffix (looks like a domain/sub-domain name, it's actually the DNS zone that
your server will query) and either get their specific codes or reject mail
from any listed IP address.
--
Bharat Suneja
MVP - Exchange
www.zenprise.com
NEW blog location:
exchangepedia.com/blog
----------------------------

"rileymartin" wrote in message @microsoft.com...
> I'm following KB Article 823866 and I'm confused over the following
> paragraph:
>
> Create a connection filter
> To create a connection filter in Exchange 2003, follow these steps: 1.
> Start
> Exchange System Manager.
> 2. Expand Global Settings, right-click Message Delivery, and then click
> Properties.
> 3. Click the Connection Filtering tab.
> 4. To create a connection filter rule, click Add.
> 5. In the Display Name box, type a name for the connection filter.
> 6. In the DNS Suffix of Provider box, type the DNS suffix that the
> provider
> appends to the IP address.
> 7. In the Custom Error Message to Return box, type a custom error message
> to
> return to the sender.
>
> What DNS suffix are they talking about??? Are they saying that I have to
> create a connection filter for every major email system on the Internet
> that
> my company communicates with? Any help would be appreciated from anyone
> that
> has implemented connection filtering. Thanks.

rileymartin · Joined: 17 Feb 2008 Posts: 10

Thanks for the info. Are you or anyone you know using real-time block lists?
It sounds like a good idea in theory.

"Bharat Suneja [MVP]" wrote:

> The verbiage on that KBA could be confusing... what you're doing is
> configuring the Connection Filter with a Real-time Block List (RBL).
> It's not done for every mail system on the internet - you only need to do
> this if you want to use a RBL.
> For instance, if you wanted to use the Zen list from Spamhaus, the DNS
> suffix is zen.spamhaus.org.
> http://www.spamhaus.org/zen/index.lasso
>
> The link above also explains what the different return codes (since this is
> a DNS lookup, the "codes" returned look like IP addresses - e.g. 127.0.0.2)
> mean. You can decide whether you want to drop mail for all codes returned,
> or only some of them.
>
> Similarly, if you decide to use other RBLs, you would need to get their DNS
> suffix (looks like a domain/sub-domain name, it's actually the DNS zone that
> your server will query) and either get their specific codes or reject mail
> from any listed IP address.
> --
> Bharat Suneja
> MVP - Exchange
> www.zenprise.com
> NEW blog location:
> exchangepedia.com/blog
> ----------------------------
>
>
> "rileymartin" wrote in message
> @microsoft.com...
> > I'm following KB Article 823866 and I'm confused over the following
> > paragraph:
> >
> > Create a connection filter
> > To create a connection filter in Exchange 2003, follow these steps: 1.
> > Start
> > Exchange System Manager.
> > 2. Expand Global Settings, right-click Message Delivery, and then click
> > Properties.
> > 3. Click the Connection Filtering tab.
> > 4. To create a connection filter rule, click Add.
> > 5. In the Display Name box, type a name for the connection filter.
> > 6. In the DNS Suffix of Provider box, type the DNS suffix that the
> > provider
> > appends to the IP address.
> > 7. In the Custom Error Message to Return box, type a custom error message
> > to
> > return to the sender.
> >
> > What DNS suffix are they talking about??? Are they saying that I have to
> > create a connection filter for every major email system on the Internet
> > that
> > my company communicates with? Any help would be appreciated from anyone
> > that
> > has implemented connection filtering. Thanks.
>
>

Problem with creating new mailbox user in child domain Hi! I'm a newbie here. In fact this is my first post in any newsgroup. I'm a bit desperate. I am having problems creating a new mailbox user or adding a mailbox to an existing user in the child domain. I did not experience this before. I was able to cr

ssl error and connection Running Exchange 2003 SP2 on a Windows 2000SP4 server with IIS. Have installed the appropriate certificate and all WAS working, HTTPS access from the web worked fine. Now I get the following error -2147467259 (0x80004005). Blank screen. I refresh the web

connection currency Hi, What's seems like a realistic level of connection concurrency for a Microsoft Exchange server? I'm seeing figures of 5000 on some websites, but is that really realistic? Thanks, Phil

Manually create the routing connection from an exchange 2007 I have installed exchange 2007 in our Exchange 2000 Domain. I moved over 2 test mailboxes. Those 2 mailboxes can send mail to each other but no one else. Everyone else's mailboxes located on the exchange 2000 server can send and receive mail fine from any

How to configure Connection Filter, so that ... How to configure "connection filter" so that the exchange server accepts connections only from specified IP ranges? I know I can ener these IP address ranges in "Global accept list", but what do I need to enter in "Global deny list" so that the exchange s