Microsoft KB Archive/251457

= XFOR: Connection Access Control Feature Does Not Block For Each Domain =

Article ID: 251457

Article Last Modified on 2/21/2007

-

APPLIES TO


 * Microsoft Exchange 2000 Server Standard Edition

-



This article was previously published under Q251457





SYMPTOMS
When you configure connection access to the Simple Mail Transfer Protocol (SMTP) server, the domain that you specify to be blocked may still be able to connect to the SMTP server. This connection occurs even though Domain Name System (DNS) reverse lookup is configured correctly.

For example, if you configure your SMTP server to block connections from the domain "microsoft.com" (by opening the properties of the virtual SMTP server, clicking the Access tab, clicking Connection, clicking All except the list below, and then adding the domain "microsoft.com"), a computer named server.microsoft.com may still be able to connect to your server.



CAUSE
This problem can occur if the blocked domain entry is not configured properly.



WORKAROUND
To work around this problem, make sure that the entry is formatted as follows:


 * . .com

For the example in the "Symptoms" section of this article, the correct entry is the following:


 * .microsoft.com

The following entry also works:

server.microsoft.com



STATUS
Microsoft has confirmed that this is a problem in Microsoft Exchange 2000 Server.

Keywords: kbbug kbnofix KB251457

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.