On Wed, 16 Oct 2013 09:21:46 -0800
Kevin Miller <kevin_mil...@ci.juneau.ak.us> wrote:

> So if I'm reading this right, milters such as smf-sav or milter-ahead
> will no longer be of any use?

You are reading it correctly.  On our anti-spam service, we require
some sort of recipient validation so we don't go insane scanning
messages destined to nonexistent addresses.  SMTP call-ahead was the easiest
way to do this, but now our customers either have to let us hook into their
Active Directory or explicitly provide a list of valid recipients.

Someone did send me a hack for doing recipient verification on
Exchange 2013 which I include here for archiving purposes.  Please
note that I have not tested this.  I'm also not familiar with Exchange,
so some of the terminology means nothing to me...

Regards,

David.

==========================================================================
From: Leon Black 
To: "i...@roaringpenguin.com" <i...@roaringpenguin.com>
Subject: Recipient Verification correction
Date: Sat, 7 Sep 2013 03:59:27 +0000

Hey Guys,

Just saw your info on this page
http://www.roaringpenguin.com/recipient-verification re Exchange 2013
recipient verification.

I have found the workable solution with exchange 2013 to get recipient
verification working correctly with an antispam product.

The problem is when it is a single server with CAS and Mailbox
roles. To use correct verification you need to talk to the hub
transport receive connector (mailbox role) and this rejects the
address as per normal.

This is by default on port 2525, all you need to do is enable
anonymous access on the connector and open port 2525 to the antispam
IP.  Set your product to do recipient verification on port 2525 and
deliver to port 25 and it works perfectly.

Hopefully this information can help you guys out :) We do this with a
number of our exchange 2013 single server clients and it rejects
emails correctly.

Oh! Just make sure they do not create another hub transport connector.
If there is an additional one it will cause exchange transport to stop
receiving emails after a few hours.

Reply via email to