Export (0) Print
Expand All
This topic has not yet been rated - Rate this topic

Select a Directory-Based Edge Blocking Mode


Applies to: Live@edu, Forefront Online Protection for Exchange

Topic Last Modified: 2009-05-21

After a full synchronization completes, Hosted Filtering customers can log into the Administration Center and select the type of recipient edge blocking to use on the User accounts which have been synchronized to the Hosted Services network. The two types of edge blocking modes available with the use of DST are Reject–Test and Reject.

If you subscribe only to Hosted Archive or Continuity, the Directory-Based Edge Blocking configuration is not available.

Reject-Test mode is a test function designed to be used for a short period of time (time period varies depending on how large your company is). Its purpose is to validate the accuracy of the user list. While Reject-Test mode is operating, any message received for a recipient who is included on the user list is processed according to the domain’s settings. When a message is received for a recipient who is not included on the user list, that message will be processed according to the domain’s settings, and then delivered to the e-mail redirection address specified for the test.

In Reject mode, all e-mail addresses that are not included on the list of e-mail addresses associated with the specified domain are rejected at the network perimeter. If a message is received that is addressed to a recipient who is not included on that domain’s user list, the sender receives a 554 error message (which reads as follows: smtp;554 <badaddress@contoso.com>: Recipient address rejected: Access denied). When a recipient is included on the user list for the domain and a message is received, the message is processed according to that domain’s settings.

The DST supports only Reject and Reject–Test recipient edge blocking modes at this time. If you are currently using Pass Through mode or Passive mode, it is important to note that these modes are not supported by the DST.
The DST also does not support Virtual Domains. Although the Virtual Domain settings will not be visibly altered by changing the User List Source for the Parent Domain, the settings configured on the Virtual Domain will fail to be applied once the User List Source for the Parent Domain has moved away from Admin Center or SFTP.
Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

© 2014 Microsoft. All rights reserved.