Block Email by IP Address
John Hayes
Thanks much
John
Mariette Knap [SBS-MVP]
> How can I block email from a specific ip address or range of ips ?
You can use the ISA SMTP filter for this. See www.isaserver.org for more
information.
--
Bye
Mariette Knap [MS SBS MVP]
Author of the SBS 2000 FAQ Site: http://www.sbs2000.info/
William Hartwell
I hope this helps:
1. Start >> Small Business Server Administrator Console
Internet Security and Acceleration server 2000
Servers and Arrays
The name of your SBS computer
Access Policy
Right click on "IP Packet Filters"
New >> Filter
2. Give the filter a name such as "Block 0.0.0.0" (I use the IP range I want
to block) and select Next
3. Select Block packet transmission
4. Choose the Predefined: type of SMTP and select Next
5. Select Next (Default IP address ... is default)
6. Select Only this remote computer and enter the IP address you want to
block. If you want to block a range of addresses just enter the first one
now. Select Next
7. Select Finish
If you want to select a range of IP addresses continue.
8. Select "IP Packet Filters" in the left pane and find your newly created
filter in the right pane. Right click on your new filter and choose
Properties
9. I usually enter the IP under in the Description window to make it easier
to find when I'm looking at a lot of filters.
10. Select the Remote Computer Tab
11. Select This range of computers and enter the subnet and netmask. Click
OK!
Bill
"John Hayes" <jo...@worldwide-wines.moc> wrote in message
news:7eZs9.5042$AV.169...@newssvr10.news.prodigy.com...
John Doe
exchange.
"William Hartwell" <infoREM...@sencomp.com> wrote in message
news:eVgXKsUeCHA.3556@tkmsftngp08...
Tim Long
but not by IP address.
My suggestion is to create a protocol rule "Deny SMTP from specific IP".
Pick (obviously) the SMTP protocol and create a new Client Address Set
containing the IP address(es) you wish to block.
Come to think of it, I've never once been able to get the SMTP filter to do
anything at all on my SBS. I suspect there is some impediment to it working
on a SBS server. Can anyone expand on this or prove me wrong?
--Tim Long
"Mariette Knap [SBS-MVP]" <mari...@matterhorn.xs4all.nl> wrote in message
news:3db46b00$0$33974$e4fe...@dreader7.news.xs4all.nl...
John Doe
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q320703
:o)
"Tim Long" <T...@long-family.com> wrote in message
news:ap2hbd$jue$1...@newsg4.svr.pol.co.uk...
Tim Long
functional in SBS-2000. Thanks for correcting me. Can I take it we agree
that you can't block by IP address using the SMTP filter?
--Tim Long
"John Doe" <John@no_email.com> wrote in message
news:OSdgX8XeCHA.1952@tkmsftngp09...
Tim Long
think its a good habit to get into as they are generally more flexible. For
example, when John wants to block another IP address, he can just add it to
the client address set, rather than having to create a whole new filter.
--
--Tim Long
"William Hartwell" <infoREM...@sencomp.com> wrote in message
news:eVgXKsUeCHA.3556@tkmsftngp08...
William Hartwell
to keep track of. If you use packet filters and set them up as I suggest you
can just look at a list of IP's in order to see how you stand. Also if you
let ISA take care of the blocking, Exchange does not even have to deal with
it.
That's my two cents :)
Bill
"Tim Long" <T...@long-family.com> wrote in message
news:ap2jfp$jp1$1...@newsg3.svr.pol.co.uk...
John Doe
Thinking about it, probably managing it at the ISA level is indeed a better
practice.
I am an exchange freak......
:o)
"William Hartwell" <infoREM...@sencomp.com> wrote in message
news:O26O5TbeCHA.2460@tkmsftngp09...
John Doe
I use smtp logging and search for 550.
"William Hartwell" <infoREM...@sencomp.com> wrote in message
news:O26O5TbeCHA.2460@tkmsftngp09...
Steve Foster [SBS MVP]
Protocol Rules affect clients behind ISA, not the ISA server itself. You
have to use packet filters.
That's why the configuration to allow SMTP is in the packet filters, not
the protocol rules.
--
Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.
Tim Long wrote:
> Personally I would use protocol rules in preference to packet
> filters. I think its a good habit to get into as they are generally
> more flexible. For example, when John wants to block another IP
> address, he can just add it to the client address set, rather than
> having to create a whole new filter.
>
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
Chris Curtis
I just add unwanted email addresses to it.
A bit tedious to begin with but has the advantage on not filling up
administrators mailbox with undeliverable messages!
Chris Curtis
"William Hartwell" <infoREM...@sencomp.com> wrote in message
news:O26O5TbeCHA.2460@tkmsftngp09...
Joseph Priore
Thanks,
Joe