Solved

Exchange 2010 Anti-Spam - Custom Words

Posted on 2014-10-16
3
259 Views
Last Modified: 2015-02-19
We've been getting an awful lot of spam, so I've been adding words to the custom words list and changing the rating for deletion down to 6. I also created a transport rule where if the SCL rating is 7+/delete message.

However, using only a specified custom word in both the subject and body - I am still able to email myself from my personal email. So it's never actually checking against the custom words list.

All of the anti spam nodes are enabled in OC>AntiSpam and SC>Hub

Any advice besides purchasing third party software?
0
Comment
Question by:RISLA
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 40385493
Third party software is usually the best option if you find the built in tools aren't doing the job. Custom words I find is not very productive, plus you are wasting bandwidth because the message is delivered before you can actually scan it.

If you look at the headers of the message that gets through - does it have an SCL value?

Simon.
0
 

Author Comment

by:RISLA
ID: 40386508
I am seeing an SCL, never even thought to check...very new to Exchange.

Here is one example of spam

Received: from 006c6859.zymorn.info (173.44.212.153) by
 server.mydomain x.x.x.x) with Microsoft SMTP Server id
 x.x.x.x; Fri, 17 Oct 2014 06:11:52 -0400
Received: by 006c6859.ear60lj.zymorn.info      (amavisd-new, port 6387) with ESMTP
 id 00SWOUNG6C68MJJRED59;      for <me@domain.com>; Fri, 17 Oct 2014 03:12:32
 -0700
Date: Fri, 17 Oct 2014 03:12:32 -0700
Subject: Printer Ink-Save up to 85% off.
To: <me@domain.com>
From: Cheapprinterink <Cheapprinterink@zymorn.info>
Message-ID: <3872017104214387154143545643@ear60lj.zymorn.info>
Content-Language: en-us
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: multipart/alternative;
      boundary="----=Part.715.4235.1413540752"
Return-Path: Cheapprinterink@zymorn.info
X-MS-Exchange-Organization-AuthSource: server.domain.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Organization-PRD: zymorn.info
X-MS-Exchange-Organization-SenderIdResult: None
Received-SPF: None (RIJB-EX.nesla-domain.com: Cheapprinterink@zymorn.info
 does not designate permitted sender hosts)
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-PCL: 2
X-MS-Exchange-Organization-Antispam-Report: DV:3.3.14213.475;SID:SenderIDStatus None;OrigIP:173.44.212.153

Thanks for your help with this!
0
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 500 total points
ID: 40387290
There is your SCL value:
X-MS-Exchange-Organization-SCL: 5

If you have deletion set at 6, that message should have been deleted.

The IP address in the message is on a number of blacklists, so that would have caught it as well.

Have you configured the content filter to delete the messages at 6?
http://technet.microsoft.com/en-gb/library/aa995953(v=exchg.150).aspx

Simon.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This process describes the steps required to Import and Export data from and to .pst files using Exchange 2010. We can use these steps to export data from a user to a .pst file, import data back to the same or a different user, or even import data t…
The new Gmail Phishing Scam going around is surprising even the savviest of users with its sophisticated techniques.
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question