RE: Exchange 2007 Spam Filtering
I am NOT going to incriminate myself here! :) Larry From: Steve Szabo [mailto:steve...@gmail.com] Sent: Thursday, July 22, 2010 7:55 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Spam Filtering Have you thought about teaching him unsubscribe, or is he too high on the food chain to learn something like that? \\Steve// From: Brown, Larry [mailto:larry.br...@dplinc.com] Sent: Thursday, July 22, 2010 9:35 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Spam Filtering Well, I have yet to find a message in his Junk email folder (he moves it there, and has about 500 addresses in his blocked senders list) that hasn't gone through our Edge transport according to the Header info. I have figured out that about 50% of what he gets are trade related 'newsletters' and 'news-bulletins'. He has either signed up for them and forgotten, or someone has signed him up without his knowledge. I could see someone signing him up as a form of aggravation since he is an executive that has been here for a long time. Since we are a publicly traded company, guessing or finding his address isn't that hard. And he refuses to discuss changing his email address. sigh FYI, adding b.barracudacentral.orghttp://b.barracudacentral.org to the other three RBL's we were already using, Zen.spamhaus.org Bl.spamcop.net Combined.njable.org Has dropped the amount of SPAM delivered to our quarantine folder by about 50%, and to his mailbox by 20%. There has only been one full day to check, but its apparent already that it has helped a great deal. Larry From: Jeff Brown [mailto:2jbr...@gmail.com] Sent: Wednesday, July 21, 2010 10:24 AM To: MS-Exchange Admin Issues Subject: Re: Exchange 2007 Spam Filtering It looks like you know what you are doing and have done more work to stop spam than a lot of guys. With ZEROS getting through have you verified, as MBS suggested at the start of this thread, that in fact these messages are going through your edge servers? This looks like what you get when SPAM finds its way directly through a secondary MX pointer that may not be filtered on the same level On Tue, Jul 20, 2010 at 10:16 PM, Kurt Buff kurt.b...@gmail.commailto:kurt.b...@gmail.com wrote: My RBL of choice is zen.spamhaus.orghttp://zen.spamhaus.org But, it's running on a Maia Mailguard box. Cost was hardware and time. On Tue, Jul 20, 2010 at 09:00, Brown, Larry larry.br...@dplinc.commailto:larry.br...@dplinc.com wrote: Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange's native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day...and of course he is a VIP. He does not want to change his email address. But he does want us to fix this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don't do business with those parts of the world. We also use free Real Time Black Lists (remember, can't spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL's of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn't look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets?
RE: Exchange 2007 Spam Filtering
Just as an aside, I had to stop using the NJABL sites because they are very aggressive in regards to backscatter and it was blocking one of our partners who was using a hosted product from a LARGE provider but Danica Patrick knows nothing about the problem. ;-) From: Brown, Larry [mailto:larry.br...@dplinc.com] Sent: Thursday, July 29, 2010 1:00 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Spam Filtering I am NOT going to incriminate myself here! :) Larry From: Steve Szabo [mailto:steve...@gmail.com] Sent: Thursday, July 22, 2010 7:55 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Spam Filtering Have you thought about teaching him unsubscribe, or is he too high on the food chain to learn something like that? \\Steve// From: Brown, Larry [mailto:larry.br...@dplinc.com] Sent: Thursday, July 22, 2010 9:35 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Spam Filtering Well, I have yet to find a message in his Junk email folder (he moves it there, and has about 500 addresses in his blocked senders list) that hasn't gone through our Edge transport according to the Header info. I have figured out that about 50% of what he gets are trade related 'newsletters' and 'news-bulletins'. He has either signed up for them and forgotten, or someone has signed him up without his knowledge. I could see someone signing him up as a form of aggravation since he is an executive that has been here for a long time. Since we are a publicly traded company, guessing or finding his address isn't that hard. And he refuses to discuss changing his email address. sigh FYI, adding b.barracudacentral.orghttp://b.barracudacentral.org to the other three RBL's we were already using, Zen.spamhaus.org Bl.spamcop.net Combined.njable.org Has dropped the amount of SPAM delivered to our quarantine folder by about 50%, and to his mailbox by 20%. There has only been one full day to check, but its apparent already that it has helped a great deal. Larry From: Jeff Brown [mailto:2jbr...@gmail.com] Sent: Wednesday, July 21, 2010 10:24 AM To: MS-Exchange Admin Issues Subject: Re: Exchange 2007 Spam Filtering It looks like you know what you are doing and have done more work to stop spam than a lot of guys. With ZEROS getting through have you verified, as MBS suggested at the start of this thread, that in fact these messages are going through your edge servers? This looks like what you get when SPAM finds its way directly through a secondary MX pointer that may not be filtered on the same level On Tue, Jul 20, 2010 at 10:16 PM, Kurt Buff kurt.b...@gmail.commailto:kurt.b...@gmail.com wrote: My RBL of choice is zen.spamhaus.orghttp://zen.spamhaus.org But, it's running on a Maia Mailguard box. Cost was hardware and time. On Tue, Jul 20, 2010 at 09:00, Brown, Larry larry.br...@dplinc.commailto:larry.br...@dplinc.com wrote: Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange's native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day...and of course he is a VIP. He does not want to change his email address. But he does want us to fix this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don't do business with those parts of the world. We also use free Real Time Black Lists (remember, can't spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL's of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn't look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets? CONFIDENTIALITY STATEMENT: The information transmitted, or contained or attached to or with this Notice is intended only for the person or entity to which it is addressed and may contain Protected Health Information (PHI), confidential and/or privileged material. Any review, transmission, dissemination, or other use of, and taking any action in reliance upon this information by persons or entities other than the intended recipient without the express written consent of the sender are prohibited. This information may be protected by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), and other Federal and Florida laws. Improper or unauthorized use or disclosure of this information could result in civil and/or criminal penalties. Consider the environment. Please don't print this e-mail unless you really need to. This email and any attached files
RE: Exchange 2007 Spam Filtering
I have been inspired by this thread to re-attempt to get RBL filtering working on my Exchange 2007 server. I tried before and couldn't get it to work. I have added zen.spamhaus.org as an IP Block List provider and enabled it. But spam is still delivered! I studied a spam message that arrived this morning and got the source IP address. I confirmed on the spamhaus website that this ip address is on their list. I tried this script: get-ipblocklistprovider | test-ipblocklistprovider -ipaddress 115.138.46.65 and it seems to work! Exchange says that spamhaus reports this IP address as being a spam source. But then I try get-antispamtoprblproviders and it comes up blank. And when I send an email to spamhaus' nelson-sbl-t...@crynwr.com email address (which sends a reply from a black listed IP address), the email reply is received when it should be blocked. Have I forgotten to do something? Regards, Andrew From: Steve Szabo [mailto:steve...@gmail.com] Sent: 23 July 2010 01:55 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Spam Filtering Have you thought about teaching him unsubscribe, or is he too high on the food chain to learn something like that? \\Steve// From: Brown, Larry [mailto:larry.br...@dplinc.com] Sent: Thursday, July 22, 2010 9:35 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Spam Filtering Well, I have yet to find a message in his Junk email folder (he moves it there, and has about 500 addresses in his blocked senders list) that hasn't gone through our Edge transport according to the Header info. I have figured out that about 50% of what he gets are trade related 'newsletters' and 'news-bulletins'. He has either signed up for them and forgotten, or someone has signed him up without his knowledge. I could see someone signing him up as a form of aggravation since he is an executive that has been here for a long time. Since we are a publicly traded company, guessing or finding his address isn't that hard. And he refuses to discuss changing his email address. sigh FYI, adding b.barracudacentral.orghttp://b.barracudacentral.org to the other three RBL's we were already using, Zen.spamhaus.org Bl.spamcop.net Combined.njable.org Has dropped the amount of SPAM delivered to our quarantine folder by about 50%, and to his mailbox by 20%. There has only been one full day to check, but its apparent already that it has helped a great deal. Larry From: Jeff Brown [mailto:2jbr...@gmail.com] Sent: Wednesday, July 21, 2010 10:24 AM To: MS-Exchange Admin Issues Subject: Re: Exchange 2007 Spam Filtering It looks like you know what you are doing and have done more work to stop spam than a lot of guys. With ZEROS getting through have you verified, as MBS suggested at the start of this thread, that in fact these messages are going through your edge servers? This looks like what you get when SPAM finds its way directly through a secondary MX pointer that may not be filtered on the same level On Tue, Jul 20, 2010 at 10:16 PM, Kurt Buff kurt.b...@gmail.commailto:kurt.b...@gmail.com wrote: My RBL of choice is zen.spamhaus.orghttp://zen.spamhaus.org But, it's running on a Maia Mailguard box. Cost was hardware and time. On Tue, Jul 20, 2010 at 09:00, Brown, Larry larry.br...@dplinc.commailto:larry.br...@dplinc.com wrote: Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange's native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day...and of course he is a VIP. He does not want to change his email address. But he does want us to fix this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don't do business with those parts of the world. We also use free Real Time Black Lists (remember, can't spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL's of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn't look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets?
RE: Exchange 2007 Spam Filtering
Well, I have yet to find a message in his Junk email folder (he moves it there, and has about 500 addresses in his blocked senders list) that hasn't gone through our Edge transport according to the Header info. I have figured out that about 50% of what he gets are trade related 'newsletters' and 'news-bulletins'. He has either signed up for them and forgotten, or someone has signed him up without his knowledge. I could see someone signing him up as a form of aggravation since he is an executive that has been here for a long time. Since we are a publicly traded company, guessing or finding his address isn't that hard. And he refuses to discuss changing his email address. sigh FYI, adding b.barracudacentral.orghttp://b.barracudacentral.org to the other three RBL's we were already using, Zen.spamhaus.org Bl.spamcop.net Combined.njable.org Has dropped the amount of SPAM delivered to our quarantine folder by about 50%, and to his mailbox by 20%. There has only been one full day to check, but its apparent already that it has helped a great deal. Larry From: Jeff Brown [mailto:2jbr...@gmail.com] Sent: Wednesday, July 21, 2010 10:24 AM To: MS-Exchange Admin Issues Subject: Re: Exchange 2007 Spam Filtering It looks like you know what you are doing and have done more work to stop spam than a lot of guys. With ZEROS getting through have you verified, as MBS suggested at the start of this thread, that in fact these messages are going through your edge servers? This looks like what you get when SPAM finds its way directly through a secondary MX pointer that may not be filtered on the same level On Tue, Jul 20, 2010 at 10:16 PM, Kurt Buff kurt.b...@gmail.commailto:kurt.b...@gmail.com wrote: My RBL of choice is zen.spamhaus.orghttp://zen.spamhaus.org But, it's running on a Maia Mailguard box. Cost was hardware and time. On Tue, Jul 20, 2010 at 09:00, Brown, Larry larry.br...@dplinc.commailto:larry.br...@dplinc.com wrote: Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange's native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day...and of course he is a VIP. He does not want to change his email address. But he does want us to fix this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don't do business with those parts of the world. We also use free Real Time Black Lists (remember, can't spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL's of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn't look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets?
RE: Exchange 2007 Spam Filtering
Have you thought about teaching him unsubscribe, or is he too high on the food chain to learn something like that? \\Steve// From: Brown, Larry [mailto:larry.br...@dplinc.com] Sent: Thursday, July 22, 2010 9:35 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Spam Filtering Well, I have yet to find a message in his Junk email folder (he moves it there, and has about 500 addresses in his blocked senders list) that hasn't gone through our Edge transport according to the Header info. I have figured out that about 50% of what he gets are trade related 'newsletters' and 'news-bulletins'. He has either signed up for them and forgotten, or someone has signed him up without his knowledge. I could see someone signing him up as a form of aggravation since he is an executive that has been here for a long time. Since we are a publicly traded company, guessing or finding his address isn't that hard. And he refuses to discuss changing his email address. sigh FYI, adding http://b.barracudacentral.org b.barracudacentral.org to the other three RBL's we were already using, Zen.spamhaus.org Bl.spamcop.net Combined.njable.org Has dropped the amount of SPAM delivered to our quarantine folder by about 50%, and to his mailbox by 20%. There has only been one full day to check, but its apparent already that it has helped a great deal. Larry From: Jeff Brown [mailto:2jbr...@gmail.com] Sent: Wednesday, July 21, 2010 10:24 AM To: MS-Exchange Admin Issues Subject: Re: Exchange 2007 Spam Filtering It looks like you know what you are doing and have done more work to stop spam than a lot of guys. With ZEROS getting through have you verified, as MBS suggested at the start of this thread, that in fact these messages are going through your edge servers? This looks like what you get when SPAM finds its way directly through a secondary MX pointer that may not be filtered on the same level On Tue, Jul 20, 2010 at 10:16 PM, Kurt Buff kurt.b...@gmail.com wrote: My RBL of choice is zen.spamhaus.org But, it's running on a Maia Mailguard box. Cost was hardware and time. On Tue, Jul 20, 2010 at 09:00, Brown, Larry larry.br...@dplinc.com wrote: Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange's native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day.and of course he is a VIP. He does not want to change his email address. But he does want us to fix this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don't do business with those parts of the world. We also use free Real Time Black Lists (remember, can't spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL's of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn't look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets?
Re: Exchange 2007 Spam Filtering
It looks like you know what you are doing and have done more work to stop spam than a lot of guys. With ZEROS getting through have you verified, as MBS suggested at the start of this thread, that in fact these messages are going through your edge servers? This looks like what you get when SPAM finds its way directly through a secondary MX pointer that may not be filtered on the same level On Tue, Jul 20, 2010 at 10:16 PM, Kurt Buff kurt.b...@gmail.com wrote: My RBL of choice is zen.spamhaus.org But, it's running on a Maia Mailguard box. Cost was hardware and time. On Tue, Jul 20, 2010 at 09:00, Brown, Larry larry.br...@dplinc.com wrote: Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange’s native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day…and of course he is a VIP. He does not want to change his email address. But he does want us to “fix” this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don’t do business with those parts of the world. We also use free Real Time Black Lists (remember, can’t spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL’s of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn’t look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets?
Exchange 2007 Spam Filtering
Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange's native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day...and of course he is a VIP. He does not want to change his email address. But he does want us to fix this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don't do business with those parts of the world. We also use free Real Time Black Lists (remember, can't spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL's of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn't look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets?
RE: Exchange 2007 Spam Filtering
I've got several clients using the native antispam. I don't have any experiencing that high level of spam entry. Are you sure that all email (including the spam!) entering your company is doing so through the Exchange server? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brown, Larry [mailto:larry.br...@dplinc.com] Sent: Tuesday, July 20, 2010 12:01 PM To: MS-Exchange Admin Issues Subject: Exchange 2007 Spam Filtering Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange's native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day...and of course he is a VIP. He does not want to change his email address. But he does want us to fix this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don't do business with those parts of the world. We also use free Real Time Black Lists (remember, can't spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL's of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn't look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets?
Re: Exchange 2007 Spam Filtering
Which RBLs are you using? Have you considered adding b.barracudacentral.org ? http://www.barracudacentral.org/rbl http://www.barracudacentral.org/rblAlso, there are quit a few open source anti-spam solutions out there (SpamAssassin, etc.). Have you thought about any of them? On Tue, Jul 20, 2010 at 12:00 PM, Brown, Larry larry.br...@dplinc.comwrote: Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange’s native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day…and of course he is a VIP. He does not want to change his email address. But he does want us to “fix” this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don’t do business with those parts of the world. We also use free Real Time Black Lists (remember, can’t spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL’s of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn’t look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets?
RE: Exchange 2007 Spam Filtering
We're using the native anti-spam with Spamhaus. We have a couple of users that get large 50-60 spam emails some days. The great majority of the stuff that gets through is image spam, where there is no text to help filter. Steve Hart Network Administrator 503.491.4343 -Direct | 503.492.8160 - Fax From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Tuesday, July 20, 2010 9:09 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Spam Filtering I've got several clients using the native antispam. I don't have any experiencing that high level of spam entry. Are you sure that all email (including the spam!) entering your company is doing so through the Exchange server? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brown, Larry [mailto:larry.br...@dplinc.com] Sent: Tuesday, July 20, 2010 12:01 PM To: MS-Exchange Admin Issues Subject: Exchange 2007 Spam Filtering Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange's native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day...and of course he is a VIP. He does not want to change his email address. But he does want us to fix this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don't do business with those parts of the world. We also use free Real Time Black Lists (remember, can't spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL's of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn't look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets?
RE: Exchange 2007 Spam Filtering
What RBL's are you using? They should knock down most of this. Look at the headers of where they are coming from, your Asian and European idea may be helpful. I am lucky, I can refuse pretty much the whole world except North America. That really helps us. Also look at that one user that is having trouble...how many are you stopping. Sometimes it becomes a matter of percentages. You can knock down 95 percent of the spam for someone but if they are getting a 1000 of them a day that is still 50 getting through. You are doing a pretty good job at 95 percent blockage but it doesn't appear that way to the user. From: Brown, Larry [mailto:larry.br...@dplinc.com] Sent: Tuesday, July 20, 2010 12:01 PM To: MS-Exchange Admin Issues Subject: Exchange 2007 Spam Filtering Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange's native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day...and of course he is a VIP. He does not want to change his email address. But he does want us to fix this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don't do business with those parts of the world. We also use free Real Time Black Lists (remember, can't spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL's of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn't look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets?
RE: Exchange 2007 Spam Filtering
That's unusual with Spamhaus zen list. Where is the spam originating from? Do you have network hardware that supports ACLs? ~JasonG -Original Message- From: Steve Hart [mailto:sh...@wrightbg.com] Sent: Tuesday, July 20, 2010 12:17 To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Spam Filtering We're using the native anti-spam with Spamhaus. We have a couple of users that get large 50-60 spam emails some days. The great majority of the stuff that gets through is image spam, where there is no text to help filter. Steve Hart Network Administrator 503.491.4343 -Direct | 503.492.8160 - Fax From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Tuesday, July 20, 2010 9:09 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Spam Filtering I've got several clients using the native antispam. I don't have any experiencing that high level of spam entry. Are you sure that all email (including the spam!) entering your company is doing so through the Exchange server? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brown, Larry [mailto:larry.br...@dplinc.com] Sent: Tuesday, July 20, 2010 12:01 PM To: MS-Exchange Admin Issues Subject: Exchange 2007 Spam Filtering Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange's native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day...and of course he is a VIP. He does not want to change his email address. But he does want us to fix this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don't do business with those parts of the world. We also use free Real Time Black Lists (remember, can't spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL's of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn't look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets?
Re: Exchange 2007 Spam Filtering
try barracuda's RBL it is better than spamhaus and spamcops RBL From: Kennedy, Jim Sent: Tuesday, July 20, 2010 11:23 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Spam Filtering What RBL's are you using? They should knock down most of this. Look at the headers of where they are coming from, your Asian and European idea may be helpful. I am lucky, I can refuse pretty much the whole world except North America. That really helps us. Also look at that one user that is having trouble.how many are you stopping. Sometimes it becomes a matter of percentages. You can knock down 95 percent of the spam for someone but if they are getting a 1000 of them a day that is still 50 getting through. You are doing a pretty good job at 95 percent blockage but it doesn't appear that way to the user. From: Brown, Larry [mailto:larry.br...@dplinc.com] Sent: Tuesday, July 20, 2010 12:01 PM To: MS-Exchange Admin Issues Subject: Exchange 2007 Spam Filtering Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange's native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day.and of course he is a VIP. He does not want to change his email address. But he does want us to fix this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don't do business with those parts of the world. We also use free Real Time Black Lists (remember, can't spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL's of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn't look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets?
RE: Exchange 2007 Spam Filtering
Yes, I am. Larry From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Tuesday, July 20, 2010 12:09 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Spam Filtering I've got several clients using the native antispam. I don't have any experiencing that high level of spam entry. Are you sure that all email (including the spam!) entering your company is doing so through the Exchange server? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brown, Larry [mailto:larry.br...@dplinc.com] Sent: Tuesday, July 20, 2010 12:01 PM To: MS-Exchange Admin Issues Subject: Exchange 2007 Spam Filtering Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange's native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day...and of course he is a VIP. He does not want to change his email address. But he does want us to fix this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don't do business with those parts of the world. We also use free Real Time Black Lists (remember, can't spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL's of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn't look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets?
RE: Exchange 2007 Spam Filtering
Spamhaus Spamcop Combined.njabl.org We will try your suggestion. Larry From: Richard Stovall [mailto:rich...@gmail.com] Sent: Tuesday, July 20, 2010 12:10 PM To: MS-Exchange Admin Issues Subject: Re: Exchange 2007 Spam Filtering Which RBLs are you using? Have you considered adding b.barracudacentral.orghttp://b.barracudacentral.org? http://www.barracudacentral.org/rbl Also, there are quit a few open source anti-spam solutions out there (SpamAssassin, etc.). Have you thought about any of them? On Tue, Jul 20, 2010 at 12:00 PM, Brown, Larry larry.br...@dplinc.commailto:larry.br...@dplinc.com wrote: Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange's native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day...and of course he is a VIP. He does not want to change his email address. But he does want us to fix this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don't do business with those parts of the world. We also use free Real Time Black Lists (remember, can't spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL's of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn't look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets?
RE: Exchange 2007 Spam Filtering
Several of the emails I looked at had multiple URL's. Now, I don't think email should be classified as SPAM based on this, but there should be some rating due to multiple URL's. Most of them were rated at 0. Larry From: Steve Hart [mailto:sh...@wrightbg.com] Sent: Tuesday, July 20, 2010 12:17 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Spam Filtering We're using the native anti-spam with Spamhaus. We have a couple of users that get large 50-60 spam emails some days. The great majority of the stuff that gets through is image spam, where there is no text to help filter. Steve Hart Network Administrator 503.491.4343 -Direct | 503.492.8160 - Fax From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Tuesday, July 20, 2010 9:09 AM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Spam Filtering I've got several clients using the native antispam. I don't have any experiencing that high level of spam entry. Are you sure that all email (including the spam!) entering your company is doing so through the Exchange server? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Brown, Larry [mailto:larry.br...@dplinc.com] Sent: Tuesday, July 20, 2010 12:01 PM To: MS-Exchange Admin Issues Subject: Exchange 2007 Spam Filtering Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange's native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day...and of course he is a VIP. He does not want to change his email address. But he does want us to fix this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don't do business with those parts of the world. We also use free Real Time Black Lists (remember, can't spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL's of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn't look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets?
RE: Exchange 2007 Spam Filtering
For this user it is about 50-50. This doesn't include SPAM that is blocked by RBL's or other tools, just the ones that are classified as SPAM. Larry From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Tuesday, July 20, 2010 12:24 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Spam Filtering What RBL's are you using? They should knock down most of this. Look at the headers of where they are coming from, your Asian and European idea may be helpful. I am lucky, I can refuse pretty much the whole world except North America. That really helps us. Also look at that one user that is having trouble...how many are you stopping. Sometimes it becomes a matter of percentages. You can knock down 95 percent of the spam for someone but if they are getting a 1000 of them a day that is still 50 getting through. You are doing a pretty good job at 95 percent blockage but it doesn't appear that way to the user. From: Brown, Larry [mailto:larry.br...@dplinc.com] Sent: Tuesday, July 20, 2010 12:01 PM To: MS-Exchange Admin Issues Subject: Exchange 2007 Spam Filtering Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange's native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day...and of course he is a VIP. He does not want to change his email address. But he does want us to fix this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don't do business with those parts of the world. We also use free Real Time Black Lists (remember, can't spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL's of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn't look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets?
RE: Exchange 2007 Spam Filtering
Make sure you are using the 'zen' Spamhaus. From: Brown, Larry [mailto:larry.br...@dplinc.com] Sent: Tuesday, July 20, 2010 1:15 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2007 Spam Filtering Spamhaus Spamcop Combined.njabl.org We will try your suggestion. Larry From: Richard Stovall [mailto:rich...@gmail.com] Sent: Tuesday, July 20, 2010 12:10 PM To: MS-Exchange Admin Issues Subject: Re: Exchange 2007 Spam Filtering Which RBLs are you using? Have you considered adding b.barracudacentral.orghttp://b.barracudacentral.org? http://www.barracudacentral.org/rbl Also, there are quit a few open source anti-spam solutions out there (SpamAssassin, etc.). Have you thought about any of them? On Tue, Jul 20, 2010 at 12:00 PM, Brown, Larry larry.br...@dplinc.commailto:larry.br...@dplinc.com wrote: Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange's native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day...and of course he is a VIP. He does not want to change his email address. But he does want us to fix this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don't do business with those parts of the world. We also use free Real Time Black Lists (remember, can't spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL's of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn't look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets?
RE: Exchange 2007 Spam Filtering
We also have the SCL set to 7. Just use zen.spamhsus.org. Use SpamBayes on Outlook. Can't recall when last I saw a spam in my Inbox.. The drawback to SpamBayes is that it requires about 2 weeks' worth of training before it stops pretty much anything the user conceives as spam and only occasionally will one slip through, in my experience. \\Steve// From: Brown, Larry [mailto:larry.br...@dplinc.com] Sent: Tuesday, July 20, 2010 12:01 PM To: MS-Exchange Admin Issues Subject: Exchange 2007 Spam Filtering Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange's native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day.and of course he is a VIP. He does not want to change his email address. But he does want us to fix this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don't do business with those parts of the world. We also use free Real Time Black Lists (remember, can't spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL's of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn't look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets?
Re: Exchange 2007 Spam Filtering
My RBL of choice is zen.spamhaus.org But, it's running on a Maia Mailguard box. Cost was hardware and time. On Tue, Jul 20, 2010 at 09:00, Brown, Larry larry.br...@dplinc.com wrote: Exchange 2007, SPAM SCL set to 7. To save money our company elected to rely on Exchange’s native SPAM filtering on the Exchange Edge servers. However, now we are getting complaints about the high level of SPAM getting through to users. One user is getting as many as 100 SPAM emails a day…and of course he is a VIP. He does not want to change his email address. But he does want us to “fix” this problem without spending money. We are considering blocking Asian and Eastern European domains, as we don’t do business with those parts of the world. We also use free Real Time Black Lists (remember, can’t spend money), Sender ID check, and the open proxy test. Sadly, when reviewing a lot of the SPAM our user has received we have found way too many SCL’s of 0 for emails that are obviously SPAM. Oh, and lowering the SCL to 6 is also not an option, and it doesn’t look like it would make much of a difference anyway. Can anyone think of anything we have missed? Is there a way to tweak the native anti-spam filtering to make it work better? Or is this as good as it gets?
