Friday, December 28, 2007

Exchange 2007 Anti Spam

This post has been moved to
http://www.exchange-genie.com/2007/12/exchange-2007-anti-spam/

23 comments:

Baron. Ssn said...

i agree... anti spam...
good luck!

Exchange_Genie said...

This is actually a long topic with all the areas to cover :)

Anonymous said...

You are god among men for doing this.

I was up a creek because I don't have an edge server... Until I found this.

THANK YOU ^ 9999


John

Exchange_Genie said...

thank you for those kind words :)

Anonymous said...

Good work man!!


It was helpfull to clearly understand how to customize my org....


Thanks

Ricky

Adam said...

Excellent Article. You saved me a lot of time reading through technet. Keep up the excellent work!

sachinagg said...

No doubt you have done a great job and by your post you have covered each & evrything of spamming.

gn0stik said...

Awesome article and helps people out who don't have an edge box.. Too bad most people don't know about this, I doubt edge tx servers would be very popular if they did. Most orgs had pretty good, trained smarthosts, before upgrading. At any rate, I was just not willing to sacrifice a box to it. One question, why did you set your threshold so low? Just as an example? I might suggest using real world examples of settings for everything in articles like this so as not to confuse.

Exchange_Genie said...

I set it low because I wanted to caputre the message I was sending and it made things easier.
Setting will vary from place to place so there is no real good answer to what the setting should be it just depends on the company requirements.

Edge servers do have thier place for companys that was to put a non domain joined box in a DMZ and filter at the edge.

Anonymous said...

Would you recommend forwarding junk mail directly to the users junk folder in Outlook. If yes, how would you configure that?
BTW, your article is the only usable Exchange '07 spam filtering on the net. Good job!

David said...

THANK YOU!!! I was told that because I don't have an edge server that I couldn't use the recipient filtering. This just fixed my Exchange NDR problem in a few short minutes. We have a decent SPAM filter, but the only thing it is lacking is the recipient filtering. Great post! THANK YOU!!!!

Exchange_Genie said...

Please reference the article as you can use the set-organizationconfig to set the junk threshhold.

Dylan said...

Awesome article, thanks very much.

I've looked but I can't find a way to add a single sender to a whitelist - i.e. allow their email through regardless of whether it's considered spam.

I can't add their domain, as the sender is a hotmail user, and this would be fairly disastrous.

Tried adding their email address as a custom word (exception), but headers don't seem to be scanned, so this doesn't help.

Any thoughts?? :(

If anyone would know, you would, I reckon

Markus said...

Nice guide for setting up Antispam! :)

Exchange_Genie said...

you can bypass a sender.....

get-contentfilterconfig | fl

you will see bypasssenders as a option

Set-ContentFilterConfig -BypassedSenders user@domain.com

will bypass that sender :)

Anonymous said...

The info you have provided has been great! However, i seem to mssing something with the block provider list. I have added Spamhaus just as you have. But i don't believe it is working. I email the address and received a message stating "Uh-oh, your SBL block is not working!" What could i be missing? Thanks

Anonymous said...

Great Job!!

Exchange_Genie said...

make sure you have the agent enabled and take a look at this http://technet.microsoft.com/en-us/library/bb124369(EXCHG.80).aspx
Also look for anything in the event logs. If all that looks ok try restart your transport service and testing again.

modak said...

i also had to disable "allow non delivery reports" in the Hub Transport -> Remote Domains items.. else it was still sending emails saying undeliverable.

thanks,

mfk

Juraj said...

Great article

But I am still unsure, how to configure spam filter, to bypass filtering for all messages from mailing list, for example example@googlegroups.com

Thanks a lot for answer.

another muay thai practitioner said...

Very nice article, saved me a lot of time! Thnx!

In exchange2003 i used IMF compagnion to monitor blocked email. Maybe you know some simular tool for 2007?

greetings from the netherlands

Anonymous said...

I have been running RTM version of Exchange 2007 for months now, and was experiencing an ongoing problem with my spamhaus RBL not being queried, and passing flagged spam through to my Inbox. I had enabled the IPBlockListProvider in the EMC, but I just found out that it was set to 'False' in the Shell. Apparently you must enable this TransportAgent in the shell, or it won't work.

Kosher said...

Your forgot to include the new tarpit feature.