IP Blocklist Providers - Exchange 2010 - Monitoring

Posted on 2011-05-05
Last Modified: 2012-05-11
A few days ago, I installed the Anti-spam agents on Exchange 2010 and used the IP Blocklist Providers option with Spamhaus Zen to start blocking spam emails. I have to say, it seems to be working great, because spam has been dramatically reduced.

My problem now is that I don’t know how to monitor which emails are blocked. Before configuring the IP Blockist Providers option, spam email would get in the junk folder in Outlook. So I could see what was blocked and act accordingly. Now the junk emails don’t even get to my Outlook.

How can I see what Spamhaus Zen blocked?

Question by:AJKBOC
    LVL 6

    Accepted Solution

    if it is just numbers you seek, then could make use of some of the cool freebie powershells located @ C:\Program Files\Microsoft\Exchange Server\V14\Scripts

    in particular get-AntispamTopRBLProviders.ps1

    here are a few pages to get you going, they refer to 2007, but should apply to 2010 also...

    have fun!
    LVL 6

    Expert Comment

    by:J P
    including an important bit
    When an incoming sender’s IP is found in an RBL, the SMTP connection from the sender is dropped and the contents of the spam email will never reach your organisation. Because of this, spam detected by an RBL will never appear in your quarantine mailbox.
    i.e. we won't be able to see the body of these dropped messages

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    Create high volume marketing opportunities using email signatures with these top 10 DOs and DON'Ts of email signature marketing.
    Resolve Outlook connectivity issues after moving mailbox to new Exchange 2016 server
    Familiarize people with the process of retrieving data from SQL Server using an Access pass-thru query. Microsoft Access is a very powerful client/server development tool. One of the ways that you can retrieve data from a SQL Server is by using a pa…
    In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …

    761 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    13 Experts available now in Live!

    Get 1:1 Help Now