why spams keep coming into my Exchange 2010?

This is using a single MS Exchange 2010 server in Windows 2K8 R2 AD domain. I am using exchange native anti-spam feature to stop spams from coming in. On the block list providers, I am using bl.spamcop.net and zen.spamhaus.org. As for the SCL, 9 is deleted, 8 is rejected, and 6 for quarantined. Others, such as, sender id, sender reputation, not implemented as no idea.

However, users kept on receiving spams, and mail with spoofing addresses. The only to do was checking the message header for sender IP, and then blacklist them. Please advise how can increase the efficiency and accuracy of the anti-spam.

thanks in advance.
LVL 1
MichaelBalackAsked:
Who is Participating?
 
MichaelBalackAuthor Commented:
At the end, we decided to setup MS Forefront security 2010 for exchange. After monitoring for 2 weeks' time, the spam incident seems decreasing a lot.
0
 
Sudeep SharmaTechnical DesignerCommented:
>>> The only to do was checking the message header for sender IP, and then blacklist them.

Instead check the IP on the various RBL and see which one is able to catch the culprit spammer then the ones which you are using.

Sudeep
0
 
Sudeep SharmaTechnical DesignerCommented:
Also there are various article on Exchange on EE, have you done through them already?

Sudeep
0
On-Demand: Securing Your Wi-Fi for Summer Travel

Traveling this summer?Check out our on-demand webinar to learn about the importance of Wi-Fi security and 3 easy measures you can start taking immediately to protect your private data while using public Wi-Fi. Follow us today to learn more!

 
MichaelBalackAuthor Commented:
Hi Sudeep,

BTW, where can I find those articles in EE? How to check the RBLs for blocked IPs?
0
 
tmoore1962Commented:
2.Go in the the properties of recipient filtering and enable the option “Block messages sent to recipients not in the global address list” on the Blocked Recipients list. Apply/OK out.

Read about ”Sender Reputation” witch does a “Reverse DNS lookup” and adjust SRL rating for the sender.

http://technet.microsoft.com/en-us/library/bb124512.aspx
0
 
jhyieslaCommented:
While I have nothing against the built-in stuff from MS, I'd suggest that you seriously look at a hosted email filtering system such as MimeCast. We've been using them for about 8 months after bring with Postini for years and are really happy with them.
0
 
MichaelBalackAuthor Commented:
Hi tmoore1962,

That option is checked.
0
 
MichaelBalackAuthor Commented:
It helped to stop a lot of spams
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.