Quarantine Mailbox exchange 2007


We had a exchange 2007 server die on us, on windows 2003 x64 sp2.
We have successfully set everything back up, after we installed the new motherboard and hard drives with raid5.

Email is flowing, everything is working, except the Anti-Spam to a mailbox. I have set up the only quarantine messages of SCL rating is enabled, delete and reject are disabled.

Quarantine mailbox e-mail is set to the mailbox we want, which is the same as before, administrator@domain.net.

But Spam never reaches the mailbox. I have moved the rating to 3 on quarantine for testing but still nothing in the dedicated email box.

Before the server crash, there would be one spam every minute.

I am not sure what I am doing wrong here. I have followed Microsoft website help to the letter and still no email in the spambox as I call it.

Here is the get-contentfilterconfig;

[PS] C:\Documents and Settings\administrator.domain\Desktop>get-contentfiltercon

Name                                  : ContentFilterConfig
RejectionResponse                     : Message rejected as spam by Content Fil
OutlookEmailPostmarkValidationEnabled : True
BypassedRecipients                    : {}
QuarantineMailbox                     : administrator@domain.net
SCLRejectThreshold                    : 1
SCLRejectEnabled                      : False
SCLDeleteThreshold                    : 1
SCLDeleteEnabled                      : False
SCLQuarantineThreshold                : 3
SCLQuarantineEnabled                  : True
BypassedSenders                       : {}
BypassedSenderDomains                 : {}
Enabled                               : True
ExternalMailEnabled                   : True
InternalMailEnabled                   : False
AdminDisplayName                      :
ExchangeVersion                       : 0.1 (8.0.535.0)
DistinguishedName                     : CN=ContentFilterConfig,CN=Message Hygie
                                        ne,CN=Transport Settings,CN=First Organ
                                        ization,CN=Microsoft Exchange,CN=Servic
                                        es,CN=Configuration,DC= edit,DC=net
Identity                              : ContentFilterConfig
Guid                                  : a525196f-4f33-48ba-a3cb-0c654026a723
ObjectCategory                        : domain.net/Configuration/Schema/ms-Exch
ObjectClass                           : {top, msExchAgent, msExchMessageHygiene
WhenChanged                           : 1/8/2014 3:45:21 PM
WhenCreated                           : 10/19/2009 6:21:36 PM
OriginatingServer                     : fil-server-1.domain.net
IsValid                               : True

Is there anyone that can help me, I can post more information if needed. I am kicking my self wondering what I am doing wrong.

Also you can email this mailbox directly, and it gets mail just fine, outlook 2003 and all.


Who is Participating?
ssicomputingConnect With a Mentor Author Commented:
Alright so I fixed the issue. What the problem was is that everything was set up correctly, however you must install the spam agents in shell. So when I ran the command Get-transportagent, it did not have any of the agents used for spam.

So I ran the command - Install-antispamagents.ps1, and bam, spam is getting blocked and going to the outlook.

I was actually fixing a different company issue with spam and I ran across that, thought hey lets give it a try and sure enough worked.

[PS] D:\Documents and Settings\Administrator.domain\Desktop>Get-transportagent

Identity                                           Enabled         Priority
--------                                           -------         --------
Transport Rule Agent                               True            1
Journaling Agent                                   True            2
AD RMS Prelicensing Agent                          False           3
Connection Filtering Agent                         True            4
Content Filter Agent                               True            5
Sender Id Agent                                    True            6
Sender Filter Agent                                True            7
Recipient Filter Agent                             True            8
Protocol Analysis Agent                            True            9

[PS] D:\Documents and Settings\Administrator.domain\Desktop>

Thanks for you help!

Simon Butler (Sembee)ConsultantCommented:
I would suggest you change your SCL values to begin with. Get the reject and Delete SCL value to at least 4. It should be higher than the quarantine (even if disabled).

After making the changes, did you restart the transport service?

If you use perfmon, do you see the messages being tagged?

I also wouldn't suggest using the administrator mailbox, a specific mailbox should be used for quarantine content.

ssicomputingAuthor Commented:
I agree with you on the using administrator account, I am going to change that. I already made a AD profile and also connected with exchange.

I will move the SCL values on the disabled one, then restart transport services. I did not try and restart transports services after I changed the SCL numbers and disabled them.

I haven't actually seen any spam messages in the logs, if they get sent anywhere.

I will get back to you on this.


ssicomputingAuthor Commented:
When I placed the commands in shell, emails started populating in the outlook we had configured for spam.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.