IP Blocklist Providers - Exchange 2010 - Monitoring

A few days ago, I installed the Anti-spam agents on Exchange 2010 and used the IP Blocklist Providers option with Spamhaus Zen to start blocking spam emails. I have to say, it seems to be working great, because spam has been dramatically reduced.

My problem now is that I don’t know how to monitor which emails are blocked. Before configuring the IP Blockist Providers option, spam email would get in the junk folder in Outlook. So I could see what was blocked and act accordingly. Now the junk emails don’t even get to my Outlook.

How can I see what Spamhaus Zen blocked?

Thanks
LVL 2
AJKBOCAsked:
Who is Participating?
 
J PCommented:
if it is just numbers you seek, then could make use of some of the cool freebie powershells located @ C:\Program Files\Microsoft\Exchange Server\V14\Scripts

in particular get-AntispamTopRBLProviders.ps1

here are a few pages to get you going, they refer to 2007, but should apply to 2010 also...
http://www.allspammedup.com/2009/01/anti-spam-reporting-for-exchange-server-2007
http://exchangepedia.com/2007/12/keeping-tabs-on-antispam-filters-a-few-handy-scripts-in-exchange-server-2007.html
http://clintboessen.blogspot.com/2009/04/you-have-entered-bunch-of-rbls-into.html

have fun!
0
 
J PCommented:
including an important bit
When an incoming sender’s IP is found in an RBL, the SMTP connection from the sender is dropped and the contents of the spam email will never reach your organisation. Because of this, spam detected by an RBL will never appear in your quarantine mailbox.
i.e. we won't be able to see the body of these dropped messages
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.