Exchange 2007 Spam and Edge server
I have exchange 2007 setup on a single server. It is behind my firewall and I am doing a static mapping to go from the public IP to the private IP the exchange server is on. Since we switched to Exchange 2007, the spam is out of control. Outbound queue's are filling up with what looks like NDR attacks to other domains and we are constantly receiving spam such as email addressed from ourselves, to ourselves (Spoofed). With exchange 2003, I had this under control. There was the ability to control this somewhat. I could setup DNS block list and had control over NDR attacks and could check against SPF texdt records. It does not look like I can do any of this now. I have heard that if I want to do any of this, I now need a separate edge server. Could someone help me with this? If an edge server is what I need, I could use some setup advise. If that is not what I need, please tell me what I need to do. The spam is out of control.
If you want to install the Edge Role...here is some good information on how to do this...
http://searchexchange.techtarget.com/generic/0,295582,sid43_gci1262392,00.html
http://searchexchange.techtarget.com/generic/0,295582,sid43_gci1262392,00.html
The edge role must be on a seperate server. This role can not be installed with any other role.
ASKER
Shadowless: Thanks for the ultra fast response. I have the resources to install an edge server if it is needed, but if the script that enables the ability for me to use the HUB transport role to fight spam is just as effective as the Edge transport metthod, would it be ok to use the HUB role method, or would I get better results from the edge server method? Also, maby I could do the hub method as a temp fix until I get the edge transport server up. Thoughts?
There is a range of ways of stopping spam with some ways being better than others;
Software based Solution
This is where you install an application on a PC or Server that scans the messages.
Pros
None over other solutions
Cons
The software consumes resources such as CPU and Memory and Hard Disk Capacity so your PC or servers run inefficiently.
You may get hit by a DOS or DDOS attack and your server has to handle the load.
The spam and virus are downloaded thus consume your bandwidth.
Scanning is done on the Server inside you network. This is obviously inviting trouble into your network past your firewall unnecessarily.
The software is not future proof (A good example of this is Exchange 2003 and Exchange 2007, a lot of people will be finding their old software is not 64 bit compatible which Exchange 2007 insists on and the Software houses charge to upgrade!)
Many software based products integrate themselves so much that in the un-install guide it suggests flattening the Server and reinstalling the Operating System so this means you cant change providers easily.
Training and Updating To install the software correctly you firstly need to understand how to use it, this represents a cost in time.
The products also need constant updating and tweaking to make them work well, again, this represents a cost in time.
Backups There are a few problems with this, you only have email as far back as your last backup (EG Server fails at 4:30PM then you lose the best part of a days email) and someone has to remember to conduct the backup and check it worked which is more time and more money. The other problem is that email stores are normally very large so off site solutions are either not possible or you need to spend more money on a decent backup solution.
This is a single point of failure so if the server or internet connection fails will mean lots of bounce back messages.
Recommendation
If you think this is right for you then GFI would be my recommendation.
Hardware based Solution
This is where you install a Hardware Firewall which handles all the scanning.
Pros
They are part or totally managed by the manufacturers.
They stop the threats before it gets onto your network.
They handle the load which frees up and speeds up your server.
Some backup your email but this is normally extra cost in most cases.
Cons
Unless you have deep pockets and buy two then you have a single point of failure and even then, if you lose your internet you still will get lots of bounce back messages.
They are traditionally expensive as there is Hardware involved and then a maintenance agreement on top.
The licenses are normally pretty rigid and you normally get roped into a support contract for updates and support
Yes they perform a backup but they still need to backed up themselves as they are still susceptible to Fire, Flood, Theft and Total Failure!
They still need some configuration which is time and money.
Recommendation
If you think this is right for you then PineApp or Barracuda are good.
SaaS based Solution
This is where a provider processes your email and then sends it (Relays) it to you.
Pros
They are totally managed by the provider so anyone of any technical ability can use them.
They usually have very high SLAs so you can virtually guarantee your email will be working and no bounce backs.
They work in the cloud so threats never make it to your network.
They take the load and only pass good messages to your network so your server or PC runs faster.
There is no software to install so you can have any SMTP based system and it will work.
There is no software to install so it doesnt matter if you want to change your system.
Backups are done with some providers and this is a live backup so you wont lose a message between backups or have to copy many gig of data off site each night.
Some of the emerging ones are a very cheap alternative.
They are unmanaged so leave it to the experts and get on with something else and also, stopping spam is very tedious.
Cons
Some are not highly configurable but some are so choose wisely.
Recommendation
If you think this is right for you then Message Labs or the one I use MailFilterUK are brilliant.
Software based Solution
This is where you install an application on a PC or Server that scans the messages.
Pros
None over other solutions
Cons
The software consumes resources such as CPU and Memory and Hard Disk Capacity so your PC or servers run inefficiently.
You may get hit by a DOS or DDOS attack and your server has to handle the load.
The spam and virus are downloaded thus consume your bandwidth.
Scanning is done on the Server inside you network. This is obviously inviting trouble into your network past your firewall unnecessarily.
The software is not future proof (A good example of this is Exchange 2003 and Exchange 2007, a lot of people will be finding their old software is not 64 bit compatible which Exchange 2007 insists on and the Software houses charge to upgrade!)
Many software based products integrate themselves so much that in the un-install guide it suggests flattening the Server and reinstalling the Operating System so this means you cant change providers easily.
Training and Updating To install the software correctly you firstly need to understand how to use it, this represents a cost in time.
The products also need constant updating and tweaking to make them work well, again, this represents a cost in time.
Backups There are a few problems with this, you only have email as far back as your last backup (EG Server fails at 4:30PM then you lose the best part of a days email) and someone has to remember to conduct the backup and check it worked which is more time and more money. The other problem is that email stores are normally very large so off site solutions are either not possible or you need to spend more money on a decent backup solution.
This is a single point of failure so if the server or internet connection fails will mean lots of bounce back messages.
Recommendation
If you think this is right for you then GFI would be my recommendation.
Hardware based Solution
This is where you install a Hardware Firewall which handles all the scanning.
Pros
They are part or totally managed by the manufacturers.
They stop the threats before it gets onto your network.
They handle the load which frees up and speeds up your server.
Some backup your email but this is normally extra cost in most cases.
Cons
Unless you have deep pockets and buy two then you have a single point of failure and even then, if you lose your internet you still will get lots of bounce back messages.
They are traditionally expensive as there is Hardware involved and then a maintenance agreement on top.
The licenses are normally pretty rigid and you normally get roped into a support contract for updates and support
Yes they perform a backup but they still need to backed up themselves as they are still susceptible to Fire, Flood, Theft and Total Failure!
They still need some configuration which is time and money.
Recommendation
If you think this is right for you then PineApp or Barracuda are good.
SaaS based Solution
This is where a provider processes your email and then sends it (Relays) it to you.
Pros
They are totally managed by the provider so anyone of any technical ability can use them.
They usually have very high SLAs so you can virtually guarantee your email will be working and no bounce backs.
They work in the cloud so threats never make it to your network.
They take the load and only pass good messages to your network so your server or PC runs faster.
There is no software to install so you can have any SMTP based system and it will work.
There is no software to install so it doesnt matter if you want to change your system.
Backups are done with some providers and this is a live backup so you wont lose a message between backups or have to copy many gig of data off site each night.
Some of the emerging ones are a very cheap alternative.
They are unmanaged so leave it to the experts and get on with something else and also, stopping spam is very tedious.
Cons
Some are not highly configurable but some are so choose wisely.
Recommendation
If you think this is right for you then Message Labs or the one I use MailFilterUK are brilliant.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
VoyagerHealthCare:
You could always look at products like this for fighting spam...
http://www.sophos.com/products/enterprise/email/security-and-control/appliances/
You could always look at products like this for fighting spam...
http://www.sophos.com/products/enterprise/email/security-and-control/appliances/
ASKER
Thanks Purple, I pretty much know all that, I was just trying to determine what my options are withing Exchange 2007. If I went with a 3rd party, I would use Spam assassin for sure.
Shadowlesss: Thanks for your help, I think for know, I will go with the script just to stop the bulk of the spam. In the future, I would like to use Spam Assassin on the front and let that hand off to exchange.
Shadowlesss: Thanks for your help, I think for know, I will go with the script just to stop the bulk of the spam. In the future, I would like to use Spam Assassin on the front and let that hand off to exchange.
http://technet.microsoft.com/en-us/library/bb201691.aspx