• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 389
  • Last Modified:

Blocking 'Image Spam' on Microsft Exchange Server

We are getting a lot of Spam in the form a just an image, which is very frustrating.  Our mail setup is Microsoft Exchange 2007 with Spam filters(SP1) / Microsoft Forefront (SP1) / Outlook 2007.

Any way of creating a Forefront / Outlook or Exchange rule to block this?
0
-Juddy-
Asked:
-Juddy-
  • 5
  • 4
4 Solutions
 
Rajith EnchiparambilOffice 365 & Exchange ArchitectCommented:
If you are running all Exchange antispam agents, it blocks most of the traffic, the spam images atleast, I would think. Do you have all agents installed and updated?

Rajith.
0
 
-Juddy-Author Commented:
I have the following Exchange Agents installed, enabled and set to auto-update:

Content Filtering
IP Allow List
IP Allow List Providers
IP Block List
IP Block List Providers
Recipient Filtering
Sender Filtering
Sender ID
Sender Reputation
0
 
Rajith EnchiparambilOffice 365 & Exchange ArchitectCommented:
Have you configured these agents for your network? Couple of realtime block lists etc?
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
-Juddy-Author Commented:
Good point, something I had overlooked.  I used to have (on Antigen) Spamhaus and Spamcop set up, where on Exchange do I enter these RBL lists?
0
 
-Juddy-Author Commented:
Found it, just need to add some info now.  Before I just used to add xbl.spamhaus.org (eg) what's the syntax for doing it now, I notice there is a Provider Name and look up Domain section.
0
 
-Juddy-Author Commented:
I have implemented 3 RBL lists:

bl.spamcop.net
rbl.spamhaus.org
xbl.spamhaus.org

Are these the correct URL's to use?
0
 
Rajith EnchiparambilOffice 365 & Exchange ArchitectCommented:
That is the correct format.
0
 
Rajith EnchiparambilOffice 365 & Exchange ArchitectCommented:
Increase/decrease the spam confidence level (SCL) ratings depending upon your network as well.
0
 
-Juddy-Author Commented:
I was getting a lot of legitimate mail blocked using those three RBL providers, do you have a recommendation to a good one I should use?
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

  • 5
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now