Home   Kaiming



When Exchange server cannot deliver an incoming message, it will generate Delivery Status Notifi cation messages (DSNs) to inform the sender that something unexpected. The causes might be:

etc.

 

Internal and External Delivery of System Messages

Hub Transport Server uses the Microsoft Exchange Recipient as the sender for system-generated messages.

The Microsoft Exchange recipient is used as the sender for system-generated messages that are sent to internal message senders.

Lab setup


 

twoforests

DNStest1

DNSwin20082

Canoe.com forest

Get-SendConnector | fl name,address*,DNS*

Name : Internet
AddressSpaces : {SMTP:*;1}
DNSRoutingEnabled : True

Get-ReceiveConnector -id "WIN20082\Default WIN20082" | fl name,bindings,permission*

Name : Default WIN20082
Bindings : {0.0.0.0:25}
PermissionGroups : AnonymousUsers, ExchangeUsers, ExchangeServers, ExchangeLe cyServers

Get-RemoteDomain | fl NDR*

NDREnabled : True

Work.com forest

Get-SendConnector | fl name,address*,dns*

Name : Internet
AddressSpaces : {SMTP:*;1}
DNSRoutingEnabled : True

Get-ReceiveConnector -id "TEST1\Default TEST1" | fl name,bindings,permission*

Name : Default TEST1
Bindings : {0.0.0.0:25}
PermissionGroups : AnonymousUsers, ExchangeUsers, ExchangeServers, ExchangeLega cyServers

Get-RemoteDomain | fl NDR*

NDREnabled : True


Beaty sends e-mail to a non-existent user in its own organization. Microsoft Exchange Recipient sends back the NDR.

postmaster1

Beaty@work.com sends e-mail to tim@work.com, which does not have an e-mail address. Beaty will get a message from Microsoft Exchange Recipient.

ExchangeRecipient

Find out Microsoft Exchange Recipient address;

Get-OrganizationConfig | fl MicrosoftExchangeRecipient*

MicrosoftExchangeRecipientEmailAddresses: {SMTP:MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e@work.com}
MicrosoftExchangeRecipientReplyRecipient:
MicrosoftExchangeRecipientPrimarySmtpAddress : MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e@work.com
MicrosoftExchangeRecipientEmailAddressPolicyEnabled : True
MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e@<Accepted Domain>.

The <Accepted Domain> placeholder represents an accepted domain that is used in an e-mail address policy. For every accepted domain that is used in an e-mail address policy, there is a corresponding e-mail address???


New-AcceptedDomain –Name Coupon.com –DomainName Coupon.com


new-EmailAddressPolicy -Name 'Coupon.com' -IncludedRecipients 'AllRecipients'  -EnabledEmailAddressTemplates 'SMTP:%m@Coupon.com'


update-EmailAddressPolicy -Identity 'Coupon.com'


Get-OrganizationConfig | fl MicrosoftExchangeRecipient*


MicrosoftExchangeRecipientEmailAddresses: {smtp:MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e@work.com, SMTP:MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e@Coupon.com}
MicrosoftExchangeRecipientReplyRecipient:
MicrosoftExchangeRecipientPrimarySmtpAddress: MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e@Coupon.com
MicrosoftExchangeRecipientEmailAddressPolicyEnabled : True


However


New-AcceptedDomain –Name Idea.com –DomainName Idea.com


new-EmailAddressPolicy -Name 'iDea.com' -IncludedRecipients 'AllRecipients' -ConditionalCompany 'idea'  -EnabledEmailAddressTemplates 'SMTP:%m@Idea.com'


update-EmailAddressPolicy -Identity 'iDea.com'


Get-OrganizationConfig | fl MicrosoftExchangeRecipient*


MicrosoftExchangeRecipientEmailAddresses: {smtp:MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e@work.com, SMTP:MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e@Coupon.com}
MicrosoftExchangeRecipientReplyRecipient:
MicrosoftExchangeRecipientPrimarySmtpAddress: MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e@Coupon.com
MicrosoftExchangeRecipientEmailAddressPolicyEnabled : True


MicrosoftExchangeRecipientEmailAddress does not include SMTP:MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e@iDea.com.

External Postmaster Address

The external postmaster address is used as the sender for system-generated messages and notifications that are sent to message senders that exist outside the Microsoft Exchange Server 2007 organization. An external sender is any sender that has an e-mail address that contains a domain that is not defined in the list of accepted domains for the Exchange 2007 organization.

John sends e-mail to non-existent user in work.com. Work.com sends back the NDR.

postmaster2

John@canoe.com sends e-mail to www@work.com, which does not exist in work.com organization.

external1

 

By default, the value of the ExternalPostmasterAddress parameter on every Hub Transport server and Edge Transport server is set to the value $null.


Get-TransportServer | fl ExternalPostmasterAddress


ExternalPostmasterAddress :


For all Hub Transport servers in the Exchange organization or an Edge Transport server that has been subscribed to the Exchange organization, the external postmaster address is postmaster@<Default accepted domain>.


There is no mailbox for postmaster@<Default accepted domain>. If outsider sends mail to this address, it will be automatically dropped.


If you want to receive the mail destined for postmaster address, you could create a mailbox, e.g. pMaster, and point the ExternalPostmasterAddress to it.


Get-TransportServer | Set-TransportServer -ExternalPostmasterAddress pMaster@work.com

external2

Both Microsoft Exchange Recipient and Postmaster don’t have mailboxes. If you send e-mail to these addresses, it will be dropped.

As shown above, the NDR reveals important information -- the recipient's e-mail address was not found in the recipient's e-mail system. Spammer can use the information to guess the e-mail address of your e-mail system. It is better your Exchange organization will not send the important information out to the untrusted organization. The way to control it is by Set-RemoteDomain.

set-remotedomain -id 'Default' -NDREnabled $false


Collect NDRs

Set-TransportConfig –GenerateCopyOfDSNFor "5.1.4", "5.2.0","5.2.4", "5.4.4", "5.4.6", "5.4.8","5.1.1"

Set-OrganizationConfig -MicrosoftExchangeRecipientReplyRecipient 'Shane.Williams@work.com'

Test:

Rob.Prince@work.com sends e-mail to b@work.com, which does not exist.

"b@work.com
#550 5.1.1 RESOLVER.ADR.RecipNotFound; not found ##" NDR will be delivered to Shane.Williams@work.com.


Home