Solved

How to deal with spam where both sender and reception are the same?

Posted on 2009-07-15
4
378 Views
Last Modified: 2012-05-07
I have notice an increase of spam in my exchange tracker where both the sender and reception are the same.  i.e.:  aaaaaaaaa@domain.com.  I'm wondering if there is a way of having the system ignore these?  I only see these items in the "Message tracking Center" and they are not being populated to my mail system as I have "Send copy of Non-Delivery Report to" turn off.  I have run a number of "Open Relay" tests and have confirmed that I am not expose this way.  i.e.: http://www.checkor.com/

Thanks

James
0
Comment
Question by:thumper631
4 Comments
 
LVL 6

Expert Comment

by:grandebob
ID: 24861264
You need to create an SPF record for your domain and enforce sender ID on your server.
http://www.openspf.org/ has great information on how to do it.
0
 

Expert Comment

by:E2KX
ID: 24861282
Is the spam  Sender & recipient Domain, your own domain and emails are coming from out side or its another internet sender and recipient domain address
0
 
LVL 11

Expert Comment

by:tmeunier
ID: 24861334
Use Sender ID filtering (requires Exchange 2003 SP2), after publishing an SPF record in your own internal and external DNS.   Make sure that you add any web applications or marketing partners that send email purporting to be from your own domain.
http://technet.microsoft.com/en-us/library/aa995992%28EXCHG.65%29.aspx

Do you have any anti-spam tool in place?  Even if you use Vamsoft ORF Enterprise (vamsoft.com) it provides many highly advanced spam fighting techniques, for a very very very inexpensive price.

-tom
0
 
LVL 76

Accepted Solution

by:
Alan Hardisty earned 500 total points
ID: 24862237
If you have Exchange SP2 installed - configure Sender Filtering and add *@yourdomain.com as the sender.
This will block all messages that claim to come from your domain from external sources.
If you have users that access your server via SMTP / POP3, then you will have to add your other users to the sender filtering one by one.
This problem bugged me for ages until I discovered this new feature in SP2.
Open up Exchange System Manager, Expand Global Settings, Right-Click Message Delivery and chose properties.
On the Sender Filtering Tab add *@yourdomain.com (obviously change the domain name to match your domain;-))
You may as well Check 'filter messages with Blank Sender' and 'Drop connection of address matches filter'
On the Recipient Filtering Tab - Check Filter recipients who are not in the Directory
Setup Tarpitting - http://support.microsoft.com/kb/842851 to slow down Directory Harvesting
And then  enable the filtering on the SMTP Virtual Server (Expand Servers, Your Server, Protocols, SMTP)
Right Click the default SMTP Virtual Server and choose properties.  Click on the Advanced Tab - then the Edit Button. Tick everything and then close the windows.
Restart the Simple Mail Transfer Protocol (SMTP) service - Start, Run, Services.msc (enter) and then relish the lack of spam from your own domain name in your inbox!
 
 
0

Featured Post

Too many email signature updates to deal with?

Do you feel like you are taking up all of your time constantly visiting users’ desks to make changes to email signatures? Wish you could manage all signatures from one central location, easily design them and deploy them quickly to users? Well, there is an easy way!

Join & Write a Comment

Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now