SBS 2003, Exchange 2003 -- We finally got around to installing Exchange SP2 and enabling the IMF. We've adjusted the UCE/junk rating numbers up and down to what seems to be the best value to block most of the junk but let thru the real mail. It's blocking about 1200 junk messages a day... Big relief to our 10 users.
However, several hundred message a day that look like the following still get thru. A few get blocked, but most don't. Any idea how to stop these without stopping the real mail ?
From: ><>IL 1CE30;B5@C 0;>38 [mailto:eugenia@joint.kiev
Sent: Friday, August 21, 2009 2:13 PM
To: user
Subject: 0;>3 =0 ?@81K;L, ! 8 =0;>3 =0 8<CI5AB2>: =>20F88 20093.
0;>3 =0 ?@81K;L, ! 8 =0;>3 =0 8<CI5AB2>: =>20F88 20093.
20dF0BL HecB>3> 0v3ycB0 2009 3.
(495) 742 9I 98,(495) ''5-' /95
;L30 # - :. M. =., 0C48B>@, ?@>D5AA8>=0;L=K9 1CE30;B5@, 3;02=K9 0C48B>@ 0C48B>@A:>9 D8@<K, 02B>@ :=838 "71C:0 1CE30;B5@0. B 020=A0 4> 10;0=A0".
0;>3 =0 ?@81K;L
1. 7<5=5=8O 3;02K 25 $, 2ABC?82H85 2 A8;C A 2009 3>40 (70:>=K >B 22.07.2008 3. g 158-$ 8 >B 26.11.2008 3. g 224-$):
o AB02:8 =0;>30 =0 ?@81K;L;
o AB@0E>20=85 @01>B=8:>2;
o =>20O 0<>@B870F8>==0O ?>;8B8:0;
o =>2K9 ?>@O4>: =>@<8@>20=8O @0AE>4>2 2 2845 ?@>F5=B>2 ?> :@548B0<;
o 2K?;0BK G;5=0< A>25B0 48@5:B>@>2;
o :><0=48@>2:8;
o @0AE>4K =0 >1CG5=85 @01>B=8:>2;
o ?>@O4>: ?@87=0=8O C1KB:0 ?@8 @50;870F88 8<CI5AB25==KE ?@02;
o ?>@O4>: C?;0BK =0;>30 =0 ?@81K;L ?@8 A>740=88 =>2KE >1>A>1;5==KE ?>4@0745;5=89;
o ?>@O4>: C?;0BK 020=A>2KE ?;0B5659
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
I've used the 3rd party solutions and paid a bundle to do so. I have cancelled them all and now rely on Connection Filtering which is set up in the same area as IMF under the Connection Filtering tab. This is essentially what the 3rd party folks do but it's free! Simply add one or more block list services which are generally free (there are some you can pay for out there). My three favorite in order of preference (I include all 3 on my server but you will want to test to see what works for you) are:
1. Spamhaus (zen.spamhaus.org)
2. Barracuda (b.barracudacentral.org) You must register for this one but it's still free
3. UCEProtect-3 (dnsbl-3.uceprotect.net)
There are many others and variations from each provider as well. After much testing, I believe the 3 above enabled and in the order listed provide exceptional spam protection.
So after setting up the Blacklist filtering, is there a way to check to make sure it's working (a log, etc.) ?
I was checking on the IMF filtering when I still had it set up to archive instead of reject and adjusted the SPAM level until it was no longer rejecting desired email, but I don't know how to make sure the Bkacklist connection filtering is properly filtering the "junk".
It's not real easy in exchange 2003. You may want to read this thread
http://www.eggheadcafe.com
Exchange 2007 makes it easy to monitor. See:
http://exchangepedia.com/b
With 2003, I just did a trial and error to see what work best based on feedback from users. With 2007 the cmdlets were extremely helpful in determining what was performing best. I suggest you try the 3 i recommended and isee if it helps you out. If you get complaints run the domain that gets rejected through mxtoolbox.com's blacklist checker to see which RBL they are listed on.
Good luck!
Okay -- I implemented the 3 blacklists you provided and the next day, the users were amazed at the reduced SPAM, so it seems to be working. Iguess until we get around to moving to Exchange 2007, this is what we'll live with. But between IMF and the blacklists, folks who were getting 100s of SPAM messages a day are now only getting 4 or 5. Much better.
Thanks
Business Accounts
Answer for Membership
by: shauncroucherPosted on 2009-08-24 at 09:30:41ID: 25169954
IMF is fine as a basic SPAM filter, but I would advise purchasing some dedicated Anti-Spam software such as Microsoft Forefront, GFI Mailessentials, Sophos Puremessage or some other dedicated Anti-Spam software - they tend to be much more effective that IMF.
Shaun