Quarantine Mailbox exchange 2007


We had a exchange 2007 server die on us, on windows 2003 x64 sp2.
We have successfully set everything back up, after we installed the new motherboard and hard drives with raid5.

Email is flowing, everything is working, except the Anti-Spam to a mailbox. I have set up the only quarantine messages of SCL rating is enabled, delete and reject are disabled.

Quarantine mailbox e-mail is set to the mailbox we want, which is the same as before, administrator@domain.net.

But Spam never reaches the mailbox. I have moved the rating to 3 on quarantine for testing but still nothing in the dedicated email box.

Before the server crash, there would be one spam every minute.

I am not sure what I am doing wrong here. I have followed Microsoft website help to the letter and still no email in the spambox as I call it.

Here is the get-contentfilterconfig;

[PS] C:\Documents and Settings\administrator.domain\Desktop>get-contentfiltercon

Name                                  : ContentFilterConfig
RejectionResponse                     : Message rejected as spam by Content Fil
OutlookEmailPostmarkValidationEnabled : True
BypassedRecipients                    : {}
QuarantineMailbox                     : administrator@domain.net
SCLRejectThreshold                    : 1
SCLRejectEnabled                      : False
SCLDeleteThreshold                    : 1
SCLDeleteEnabled                      : False
SCLQuarantineThreshold                : 3
SCLQuarantineEnabled                  : True
BypassedSenders                       : {}
BypassedSenderDomains                 : {}
Enabled                               : True
ExternalMailEnabled                   : True
InternalMailEnabled                   : False
AdminDisplayName                      :
ExchangeVersion                       : 0.1 (8.0.535.0)
DistinguishedName                     : CN=ContentFilterConfig,CN=Message Hygie
                                        ne,CN=Transport Settings,CN=First Organ
                                        ization,CN=Microsoft Exchange,CN=Servic
                                        es,CN=Configuration,DC= edit,DC=net
Identity                              : ContentFilterConfig
Guid                                  : a525196f-4f33-48ba-a3cb-0c654026a723
ObjectCategory                        : domain.net/Configuration/Schema/ms-Exch
ObjectClass                           : {top, msExchAgent, msExchMessageHygiene
WhenChanged                           : 1/8/2014 3:45:21 PM
WhenCreated                           : 10/19/2009 6:21:36 PM
OriginatingServer                     : fil-server-1.domain.net
IsValid                               : True

Is there anyone that can help me, I can post more information if needed. I am kicking my self wondering what I am doing wrong.

Also you can email this mailbox directly, and it gets mail just fine, outlook 2003 and all.


William SmeadIT ConsultantAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Simon Butler (Sembee)ConsultantCommented:
I would suggest you change your SCL values to begin with. Get the reject and Delete SCL value to at least 4. It should be higher than the quarantine (even if disabled).

After making the changes, did you restart the transport service?

If you use perfmon, do you see the messages being tagged?

I also wouldn't suggest using the administrator mailbox, a specific mailbox should be used for quarantine content.

William SmeadIT ConsultantAuthor Commented:
I agree with you on the using administrator account, I am going to change that. I already made a AD profile and also connected with exchange.

I will move the SCL values on the disabled one, then restart transport services. I did not try and restart transports services after I changed the SCL numbers and disabled them.

I haven't actually seen any spam messages in the logs, if they get sent anywhere.

I will get back to you on this.


William SmeadIT ConsultantAuthor Commented:
Alright so I fixed the issue. What the problem was is that everything was set up correctly, however you must install the spam agents in shell. So when I ran the command Get-transportagent, it did not have any of the agents used for spam.

So I ran the command - Install-antispamagents.ps1, and bam, spam is getting blocked and going to the outlook.

I was actually fixing a different company issue with spam and I ran across that, thought hey lets give it a try and sure enough worked.

[PS] D:\Documents and Settings\Administrator.domain\Desktop>Get-transportagent

Identity                                           Enabled         Priority
--------                                           -------         --------
Transport Rule Agent                               True            1
Journaling Agent                                   True            2
AD RMS Prelicensing Agent                          False           3
Connection Filtering Agent                         True            4
Content Filter Agent                               True            5
Sender Id Agent                                    True            6
Sender Filter Agent                                True            7
Recipient Filter Agent                             True            8
Protocol Analysis Agent                            True            9

[PS] D:\Documents and Settings\Administrator.domain\Desktop>

Thanks for you help!


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
William SmeadIT ConsultantAuthor Commented:
When I placed the commands in shell, emails started populating in the outlook we had configured for spam.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.