Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1821
  • Last Modified:

IP Blocklist Providers - Exchange 2010 - Monitoring

A few days ago, I installed the Anti-spam agents on Exchange 2010 and used the IP Blocklist Providers option with Spamhaus Zen to start blocking spam emails. I have to say, it seems to be working great, because spam has been dramatically reduced.

My problem now is that I don’t know how to monitor which emails are blocked. Before configuring the IP Blockist Providers option, spam email would get in the junk folder in Outlook. So I could see what was blocked and act accordingly. Now the junk emails don’t even get to my Outlook.

How can I see what Spamhaus Zen blocked?

  • 2
1 Solution
J PCommented:
if it is just numbers you seek, then could make use of some of the cool freebie powershells located @ C:\Program Files\Microsoft\Exchange Server\V14\Scripts

in particular get-AntispamTopRBLProviders.ps1

here are a few pages to get you going, they refer to 2007, but should apply to 2010 also...

have fun!
J PCommented:
including an important bit
When an incoming sender’s IP is found in an RBL, the SMTP connection from the sender is dropped and the contents of the spam email will never reach your organisation. Because of this, spam detected by an RBL will never appear in your quarantine mailbox.
i.e. we won't be able to see the body of these dropped messages

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now