Solved

why spams keep coming into my Exchange 2010?

Posted on 2014-01-22
8
265 Views
Last Modified: 2014-03-03
This is using a single MS Exchange 2010 server in Windows 2K8 R2 AD domain. I am using exchange native anti-spam feature to stop spams from coming in. On the block list providers, I am using bl.spamcop.net and zen.spamhaus.org. As for the SCL, 9 is deleted, 8 is rejected, and 6 for quarantined. Others, such as, sender id, sender reputation, not implemented as no idea.

However, users kept on receiving spams, and mail with spoofing addresses. The only to do was checking the message header for sender IP, and then blacklist them. Please advise how can increase the efficiency and accuracy of the anti-spam.

thanks in advance.
0
Comment
Question by:MichaelBalack
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
8 Comments
 
LVL 30

Expert Comment

by:Sudeep Sharma
ID: 39800064
>>> The only to do was checking the message header for sender IP, and then blacklist them.

Instead check the IP on the various RBL and see which one is able to catch the culprit spammer then the ones which you are using.

Sudeep
0
 
LVL 30

Expert Comment

by:Sudeep Sharma
ID: 39800066
Also there are various article on Exchange on EE, have you done through them already?

Sudeep
0
 
LVL 1

Author Comment

by:MichaelBalack
ID: 39800077
Hi Sudeep,

BTW, where can I find those articles in EE? How to check the RBLs for blocked IPs?
0
Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

 
LVL 10

Expert Comment

by:tmoore1962
ID: 39800616
2.Go in the the properties of recipient filtering and enable the option “Block messages sent to recipients not in the global address list” on the Blocked Recipients list. Apply/OK out.

Read about ”Sender Reputation” witch does a “Reverse DNS lookup” and adjust SRL rating for the sender.

http://technet.microsoft.com/en-us/library/bb124512.aspx
0
 
LVL 28

Expert Comment

by:jhyiesla
ID: 39800686
While I have nothing against the built-in stuff from MS, I'd suggest that you seriously look at a hosted email filtering system such as MimeCast. We've been using them for about 8 months after bring with Postini for years and are really happy with them.
0
 
LVL 1

Author Comment

by:MichaelBalack
ID: 39849534
Hi tmoore1962,

That option is checked.
0
 
LVL 1

Accepted Solution

by:
MichaelBalack earned 0 total points
ID: 39849538
At the end, we decided to setup MS Forefront security 2010 for exchange. After monitoring for 2 weeks' time, the spam incident seems decreasing a lot.
0
 
LVL 1

Author Closing Comment

by:MichaelBalack
ID: 39899985
It helped to stop a lot of spams
0

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
Read this checklist to learn more about the 15 things you should never include in an email signature.
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question