How to Add IP Addresses to Exchange 2007 IP Block List

You would think this is fairly simple right.....


You want to block an IP address from sending you spam and you google to find out how and get this page as the number one result...
- https://technet.microsoft.com/en-us/library/bb123801(v=exchg.80).aspx



This topic explains how to use the Exchange Management Console or the Exchange Management Shell to add IP addresses to the IP Allow list and IP Block list for connection filtering in Microsoft Exchange Server 2007. The Connection Filter agent is an anti-spam agent that is enabled on computers that have the Edge Transport server role installed.
IP Block lists and IP Allow lists are administrator-defined lists that specify IP addresses and IP address ranges that are acted on by the Connection Filter agent. The Connection Filter agent disconnects the Simple Mail Transfer Protocol (SMTP) session after all MAIL FROM: headers in the message are processed if the following conditions are true:

• The Edge Transport server is connected directly to the Internet.
• An originating IP address matches an IP address or IP address range on the IP Block list. 

What they don't explain is ....you turn IP Blocking On/Off at the "Organizational Level".... and you enter individual IP addresses on at a "Server Level".






"Organizational Level"....
Turn on here

"Server Level"....
Selecting the Internet facing connector THEN enter IP addresses you want to block on Anti-Spam tab.

Seems obvious when reading the TechNet instructions at https://technet.microsoft.com/en-us/library/bb123801(v=exchg.80).aspx after you've worked out "how to block spam ip addresses in Exchange 2007" but you think they could edit the article to make it a little clearer.

Hope this saves you 15 mins of digging around......

Cheers,
Dean