none
Exch 2013- Spam -where does mail go? RRS feed

Answers

  • There are a couple of options that you can set, from delete, bouce, quarantine or just send to the junk folder in Outlook.

    http://technet.microsoft.com/en-us/library/aa997692(v=exchg.150).aspx


    DJ Grijalva | MCITP: EMA 2007/2010 SPA 2010 | www.persistentcerebro.com

    • Marked as answer by Talmoo Monday, November 3, 2014 3:56 PM
    Monday, November 3, 2014 3:37 PM
  • Hello There Porbar,

    There are lots of options you can set for you filtered messages:

    And levels were your messages can be filtered, as per below:

    Content Filter agent
    Sender ID agent
    Sender Filter agent
    Protocol Analysis agent for sender reputation

    On each level you have actions and settings to set till you define the destination of your filtered messages.


    Below are some of the recommended actions MSFT recommends you to do, while setting you filtering settings:

    Create a dedicated Exchange database   We recommend that you create a dedicated database for the spam quarantine mailbox. The spam quarantine mailbox should have a large database, because if the storage quota limit is reached, messages will be lost. For more information, see Manage mailbox databases in Exchange 2013.

    Create a dedicated mailbox and user account   We recommend that you create a dedicated mailbox and Active Directory user account for the spam quarantine mailbox. For more information, see Create user mailboxes.

    And for finallying your filtering will be based on the SCL configuration you do for your filtered messages, which goes from 0 to 9.

    Below is an example of you what you can do with each message your server gets

    The Delete action is enabled and the corresponding SCL threshold is set to 9.
    The Reject action is enabled and the corresponding SCL threshold is set to 8.
    The Quarantine action is enabled and the corresponding SCL threshold is set to 7.

    So answering....

    You can DELETE, which goes nowhere further in your system

    You can REJECT, so as the mail goes back to sender

    Or you can QUARENTINE, which enters you system and stays in the quarentine mailbox, thus wait for further administrative actions, such as release the mail to the destination mailbox.

    Let me know if you have further questions.

    Cheers,



    Think before you ask, give detail as much as possible, then ask and you will get help! Always have in mind, people do not guess! :)

    • Proposed as answer by diemarx Monday, November 3, 2014 3:57 PM
    • Marked as answer by Talmoo Monday, November 3, 2014 3:58 PM
    Monday, November 3, 2014 3:57 PM

All replies

  • There are a couple of options that you can set, from delete, bouce, quarantine or just send to the junk folder in Outlook.

    http://technet.microsoft.com/en-us/library/aa997692(v=exchg.150).aspx


    DJ Grijalva | MCITP: EMA 2007/2010 SPA 2010 | www.persistentcerebro.com

    • Marked as answer by Talmoo Monday, November 3, 2014 3:56 PM
    Monday, November 3, 2014 3:37 PM
  • Hello There Porbar,

    There are lots of options you can set for you filtered messages:

    And levels were your messages can be filtered, as per below:

    Content Filter agent
    Sender ID agent
    Sender Filter agent
    Protocol Analysis agent for sender reputation

    On each level you have actions and settings to set till you define the destination of your filtered messages.


    Below are some of the recommended actions MSFT recommends you to do, while setting you filtering settings:

    Create a dedicated Exchange database   We recommend that you create a dedicated database for the spam quarantine mailbox. The spam quarantine mailbox should have a large database, because if the storage quota limit is reached, messages will be lost. For more information, see Manage mailbox databases in Exchange 2013.

    Create a dedicated mailbox and user account   We recommend that you create a dedicated mailbox and Active Directory user account for the spam quarantine mailbox. For more information, see Create user mailboxes.

    And for finallying your filtering will be based on the SCL configuration you do for your filtered messages, which goes from 0 to 9.

    Below is an example of you what you can do with each message your server gets

    The Delete action is enabled and the corresponding SCL threshold is set to 9.
    The Reject action is enabled and the corresponding SCL threshold is set to 8.
    The Quarantine action is enabled and the corresponding SCL threshold is set to 7.

    So answering....

    You can DELETE, which goes nowhere further in your system

    You can REJECT, so as the mail goes back to sender

    Or you can QUARENTINE, which enters you system and stays in the quarentine mailbox, thus wait for further administrative actions, such as release the mail to the destination mailbox.

    Let me know if you have further questions.

    Cheers,



    Think before you ask, give detail as much as possible, then ask and you will get help! Always have in mind, people do not guess! :)

    • Proposed as answer by diemarx Monday, November 3, 2014 3:57 PM
    • Marked as answer by Talmoo Monday, November 3, 2014 3:58 PM
    Monday, November 3, 2014 3:57 PM
  • Hi porbar,

    Great information from both DJ Grijalva and diemarx.

    I also find an article related on "Understanding Anti-Spam and Antivirus Mail Flow" for your reference:

    http://technet.microsoft.com/en-us/library/aa997242.aspx

     

    Thanks


    Mavis Huang
    TechNet Community Support

    Monday, November 10, 2014 12:21 PM
    Moderator