Looks like I'll need to dump the mx record. Spam filtering is the right solution, but that means squeezing another turnip.
I can't firewall it because a dozen people in that company use it as their main email server. Thanks Steve ________________________________ From: Kennedy, Jim [mailto:[EMAIL PROTECTED] Sent: Thursday, January 24, 2008 1:23 PM To: MS-Exchange Admin Issues Subject: RE: mx records A few options. None of them great. Delete the secondary MX as you mentioned. Spam filtering at the secondary. Firewall port 25 on the secondary and only open it up when your primary is down. That isn't a bad option since you would know when you are down at your primary and with sending servers retrying for 48 hours or so you would have plenty of time to either get back up or undo the firewall block. From: Steve Hart [mailto:[EMAIL PROTECTED] Sent: Thursday, January 24, 2008 4:18 PM To: MS-Exchange Admin Issues Subject: mx records We have two real world MX records for our domain. The first has a preference of 10 and points to our main email server, a new E2007 box. The second mx record has a preference of 200 and points to the email server of one of our affiliated companies. That server is an old E2000 beast. Both Exchange servers are part of the same Exchange Organization and there's a point to point T1 between the sites that provides an alternate means of delivery should our main internet connection die. I'm experimenting with spam filtering on the 2007 box using SpamHaus and custom words and having quite a bit of success. Spam directly from the internet passing through the 2007 server is virtually nil. The problem is that a good portion of our spam (about 20%) seems to be arriving through the E2000 box across town. Since that server is part of internal system, the new box isn't filtering the mail. Headers show that even when the addresses are wrightbg.com, remote servers are routing the mail to wbgppm.com. Is there a way to fix this, other than deleting the second mx record? Steve ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~
