Groups | Blog | Home
all groups > iis smtp nntp > august 2004 >

iis smtp nntp : Switched DNS MX to new Server, Old Server still Gets Mail - What domain?


Scott Townsend
8/19/2004 9:25:03 AM
On 8/5/2004 I switched all of the MX Records for all of our domains to point
to our new SMTP Server.

I've seen the Size of the Log go from 2.5megs a day down to 64K a day. So I
know that I got most of them.

Though there are still about 70 connections a day on the server.

We have about 50 Domains that we service and I've done a Grep on the DNS
files to make sure I didn't miss an MX record and all looks good.

Is there a way to find out what domain the mail is going to?

Thanks,
Scott<-

Scott Townsend
8/20/2004 10:10:14 AM
I'm using IIS SMTP on Win2K Server.

My Log entries look like:
00:46:54 222.145.179.66 HELO - 250
00:46:55 222.145.179.66 MAIL - 250
00:46:59 222.145.179.66 RCPT - 550
00:47:02 222.145.179.66 QUIT - 240
01:14:53 213.39.165.217 HELO - 250
01:14:53 213.39.165.217 MAIL - 250
01:14:55 213.39.165.217 RCPT - 550
01:14:55 213.39.165.217 QUIT - 240
01:41:38 221.167.114.33 HELO - 250
01:41:38 221.167.114.33 MAIL - 250
01:41:40 221.167.114.33 RCPT - 550
01:41:40 221.167.114.33 QUIT - 240

What option do I need to turn on to see the actual RCPT?

Thanks,
Scott<-
[quoted text, click to view]

Ken Schaefer
8/20/2004 1:30:07 PM
Um, what SMTP server are you using? IIS SMTP server creates log files where
you can see the RCPT <someone@somedomain.com> being logged.

Cheers
Ken

[quoted text, click to view]

Ken Schaefer
8/23/2004 11:31:29 AM
Open IIS Manager, right-click on the SMTP virtual server -> properties. On
the general tab ensure that logging is enabled, and hit the button to
configure W3C Extended logging. On the Extended properties tab, check the
things you need.

Judging by the response codes: 550, it seems that people are attempting to
deliver stuff straight to your server, but your server is rejecting them.
This is typically spammers that try to deliver mail to your older servers
even if they are not listed in the DNS. It doesn't seem like you're getting
a lot of it (one message per hour) - I see the same thing on boxes that I
have that used to be listed as MX hosts.

Cheers
Ken

[quoted text, click to view]

Dodo
8/23/2004 7:06:51 PM
Keep in mind that both the MX record and the A record of any domain will
receive e-mail for said domain. This is due to broken SMTP servers that will
send e-mail to the A record without bothering to look up an MX record.

AddThis Social Bookmark Button