[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2996
  • Last Modified:

How prevent to send SPAM mail from Exchange 2010

Hello I have an exchange 2010 server and somebody is sending mail from it to send SPAM, if i look the queue I have some mails without sender "<>".

And If the mail is correct, the name source message is "FromLocal" and if the mail is SPAM the name source message is DSN

Are there any computer, iphone or ipod infected and sending SPAM?

Is my exchange used to resend SPAM?

Can I prevent to send mail FROM "DSN" or without mail direcction?

Many thanks
spam.jpg
0
limmontreefree
Asked:
limmontreefree
  • 4
  • 4
  • 2
5 Solutions
 
Exchange_GeekCommented:
The <> is nothing but the postmaster address that you're Exchange holds to send emails returned with NDR.

To lock you're Exchange down - you'll need to get the AntiSpam Agents installed on you're servers

Ref: link

Precisely, what you need is a good Anti-spam solution. Exchange should be able to get this for you. Along with this, ensure that you have turned on Recipient Filtering. This would prevent Exchange to receive any email for users who aren't part of you're AD.

If you wish you're Exchange not to send out NDR (that'll be a violation of RFC though), you could use the help of transport rules and NOT SENT NDRs.

Regards,
Exchange_Geek
0
 
Alan HardistyCommented:
Mail from <> is the Server sending NDR messages back to people and is perfectly normal.

Do you have any Anti-Spam software installed on the server?

Are you using the Exchange Anti-Spam tools to at the very least, filter Invalid Recipients that would prevent the NDR messages going back to spammers because the recipients they are sending to don't exist?

Alan
0
 
limmontreefreeAuthor Commented:
Hello, I have a SMTP Relay (from dyndns.com) that take the mail for us and latter send to the exchange and in theory clean the SPAM.

Has Exchange 2010 Standard any antispam included?

Maybe tomorrow pay the Eset Mail For Exchange (for AntiSpam filtering), but now I think is a good idea to do:

   1- Prevent the NDR messages going back.
   2- Prevent Exchange to receive any email for users who aren't part of you're AD.

Can you send me instructions to do these?

Many Thanks
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
Exchange_GeekCommented:
To prevent Exchange to receive any emails for users who aren't part of AD follow the steps

Open the EMC on the Hub Transport server (considering that you've installed Anti Spam Agents)
In the console tree, click Edge Transport.
In the work pane, click the Anti-spam tab, and then select Recipient Filtering.
In the action pane, click Enable.

If you believe that Exchange is sending NDR to a particular sender / recipient - you can configure Exchange rules accordingly to NOT send replies.

Regards,
Exchange_Geek
0
 
Alan HardistyCommented:
Exchange 2010 doesn't have any Anti-Spam built-in, but you can install some Anti-Spam tools by running a script:

http://technet.microsoft.com/en-us/library/bb201691.aspx

If your mail is received by a 3rd party before they send it on to you - they need to perform Recipient Filtering or you won't get rid of the <> NDR spam.

Have you also locked down your Firewall to only allow mail from your 3rd party Spam Filtering host?  If not - then spammers will find and send mail to your server directly and that can cause the <> NDR Spam.

I don't know ESET Mail For Exchange, but if you don't have anything and want to look for a great product, look no further than Vamsoft ORF.  Works really well and very reasonably priced.
0
 
limmontreefreeAuthor Commented:
Hello Exchange_Geek, I can´t find "AntiSpam tab" so i think is not installed. and I don't think Spam is sending to a particular sender.

Hello Alanhardisty,  I've followed your link but for me is a little bit complex (and is very late in spain), and you are right, my exchange only have to accept from the relay, but I need the relay IP, and I don't know if is fixed, I 'll be ask it.

Otherwise, In the relay I've configured a list of usernames so only will be relay mails to these direcctions.

Thanks.
0
 
Alan HardistyCommented:
It's very easy to install the Anti-Spam tools.

Open up the Exchange Management Shell (right-click it and choose Run As Administrator).

Then change directory to:

c:\Program Files\Microsoft\Exchange Server\V14\Scripts

cd "c:\Program Files\Microsoft\Exchange Server\V14\Scripts"

Then type:

.\install-AntispamAgents.ps1

Once that has completed, type:

Restart-Service MSExchangeTransport

You now have the Anti-Spam tools installed and can find them on the Org Config> Hub Transport> Anti-Spam Tab and Server Config> Hub Transport> Anti-Spam Tab.
0
 
limmontreefreeAuthor Commented:
Thank you

Tomorrow I'll install it and tell you.

Thanks again.
0
 
limmontreefreeAuthor Commented:
People like you is the reason to stay in this forum, you give me a clear and easy explain, no sort no long just in the middle.

I am very grateful, Sorry I can not just give more points and have to choose finally chosen as "best solution" the first but I feel that your effort needs has been just as important to me.

Thank you
0
 
Alan HardistyCommented:
You are welcome - thank you too.

I try to tell it how it is - no punches pulled!

Alan
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

  • 4
  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now