Ask a questionAsk a question
 

Answerso many spam

  • Monday, November 02, 2009 8:05 PMramos s Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Dears,
    is my domain is the only domain that recives so many spam these days
    I was reciving from my domain , then i solced it , theni now recieve from microsoft to update something with a harmfull link , and facebook to edit information with a page looks like facebook
    my ANTI-spam downloaded in edge and updating very good
    and the SCL to reject a message is 6 which is Ithink low enough to block these things
    so what should I do,
    these things happened from about tow weeks
    Regards,

Answers

  • Friday, November 06, 2009 8:58 AMElvis Wei -MSFTMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer

    Also suggest you write a post on our forefront forum to see if someone can help:

    http://social.technet.microsoft.com/Forums/en/forefrontexchange/threads

    Thanks,

    Elvis

    • Marked As Answer byramos s Saturday, November 07, 2009 5:53 PM
    •  
  • Friday, November 06, 2009 10:56 PMAlexander ZammitMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    When dealing with spam you should target the different spam types one by one.
    For example the Facebook spam usually always have Facebook in the subject.
    So you can just blacklist that keyword. Afterall even legitimate Facebook messages are not usually of business relevance (altough this if for you to decide).

    Another category of spam emails that is making it through the Content Filter these days are of the image spam type.
    The best way to deal with these is through RBLs. I prefer SpamHaus.

    BTW Don't try to deal with spam through IP blacklisting. If you want IP based blocking RBLs are the way to go.


    IMF Tune - Unleash the Full Intelligent Message Filter Power - http://www.windeveloper.com/imftune/
    • Marked As Answer byramos s Saturday, November 07, 2009 5:54 PM
    •  

All Replies

  • Wednesday, November 04, 2009 10:10 AMElvis Wei -MSFTMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Please check these junk emails, are they from internal IP or external IP? If they're from specific IPs or specific domains, please block them.
  • Wednesday, November 04, 2009 12:50 PM--Vinod-- Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    You cannot block these kinds of spams on subject based as they use random subjects nor even based on domain as they use different domains. But you need to check the Originating ip address of these spams and block them accordingly under connection filtering
    Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|
  • Wednesday, November 04, 2009 8:34 PMramos s Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    thanks for replying , it even use different IPs , so maybe the IP is spoofed
    it is just soo many activity in the las 2 weeks only , my anti-spam is up to date , so maybe there is no solution !!! , why the anti-spam doesn't block them !!!
    I know that the anti-spam add blocked IP address automatically according to their behavior
    Regards,

  • Thursday, November 05, 2009 9:53 AMElvis Wei -MSFTMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     

    If you turn down the SCL value, will it catch these junk mails?  You could try Forefront which protects your Exchange Server messaging environments from viruses, worms, spam, and inappropriate content.

    http://www.microsoft.com/forefront/serversecurity/exchange/en/us/overview.aspx

  • Thursday, November 05, 2009 2:58 PMramos s Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    thanks again
    the point is I even have microsoft forefront which is up to date 
    and the SCL for the reject e-mail is 6 , which even block non-spam e-mail one time .
    I am thinking about Ip block list provider there is only sbl-xbl.spamhaus.org , is that enough or should i use another provider , if there should be another one please provide me with a good one without fees 
    Regards,

  • Friday, November 06, 2009 8:58 AMElvis Wei -MSFTMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer

    Also suggest you write a post on our forefront forum to see if someone can help:

    http://social.technet.microsoft.com/Forums/en/forefrontexchange/threads

    Thanks,

    Elvis

    • Marked As Answer byramos s Saturday, November 07, 2009 5:53 PM
    •  
  • Friday, November 06, 2009 10:56 PMAlexander ZammitMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    When dealing with spam you should target the different spam types one by one.
    For example the Facebook spam usually always have Facebook in the subject.
    So you can just blacklist that keyword. Afterall even legitimate Facebook messages are not usually of business relevance (altough this if for you to decide).

    Another category of spam emails that is making it through the Content Filter these days are of the image spam type.
    The best way to deal with these is through RBLs. I prefer SpamHaus.

    BTW Don't try to deal with spam through IP blacklisting. If you want IP based blocking RBLs are the way to go.


    IMF Tune - Unleash the Full Intelligent Message Filter Power - http://www.windeveloper.com/imftune/
    • Marked As Answer byramos s Saturday, November 07, 2009 5:54 PM
    •