Link to home
Start Free TrialLog in
Avatar of charlie_301
charlie_301

asked on

Review of receive connector's settings

Our receive connector on Exchange 2010 is accepting dodgy emails which pretend to be sent from our own server which means if the dodgy email slips though - it will be seen as an internal one.

Example :
My domain : mygroup.co.uk

Sender's email address in dodgy email : no-reply@mygroup.co.uk

What should I untick on receive connector to stop this from happening ?
Juts now I have ticked :  Anon users, Exchange servers, legacy Exchange servers.
ASKER CERTIFIED SOLUTION
Avatar of Alan Hardisty
Alan Hardisty
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of charlie_301
charlie_301

ASKER

I have unticked Exchange servers, legacy Exchange servers from anonymous receive connector so hopefully this should work from now.

I have enabled Exchanges' anti spam features - I had already enabled recipient filtering .
I also have Sophos Pure Message on the same server with Recipient Filtering enabled.

Alan : loads of users received spam email from an address no-reply@mydomain.co.uk
So based on previous settings, server accepted email message from outside with an address same as my own domain.
Recipients addresses were correct.
Senders address doesn't exist on our end not to mention that it shouldn't have been accepted as its not generated by our server.
Have you enabled an SPF record for your Domain and are you performing SPF checking on inbound emails?

If you haven't done both - please do, or install something like Vamsoft ORF Fusion (trial) to see how well that handles your Spam for you (we use it and all our customers have it on their servers and they love the lack of spam).

Alan
Hi Alan,

Yes, I've prepared SPF record already.
I have also started testing Vamsoft software few days ago - I'll try it again.

I've heard very good comments about it.

Just now, we are getting loads of spam every day, some of it slips though PureMessage's filters. Luckily Sophos license is due for renewal and I will try with Vamsoft - if it works I will bin Sophos PureMessage.
Shout if you need help configuring it - I've done it a few times ;)

Alan
Brilliant, thanks.