Anti-Spam

Exchange Server 2007 Enterprise CALs: Let Microsoft do the filtering

Microsoft introduced the concept of Standard and Enterprise Client Access Licenses (CALs) for Exchange Server 2007. In previous versions, only the server part of Exchange came in Standard or Enterprise flavors, the latter allowing you the use of enterprise features like more number of Storage Groups and Stores, no limits on Store sizes, clustering, etc. […]

More →

Moving items to Junk Mail folder doesn’t do much

Scenario: Junk mail makes it to your Inbox, without getting filtered by any of Exchange’s anti-spam filters.Action: User moves item to Junk Mail folder.Result: This accomplishes little more than having the piece of UCE moved out of the Inbox. Contrary to what many may think and like to believe, moving a message manually to the […]

More →

TechEd 2007: Notes from the BOF Session on Fighting Spam With Exchange Server 2007

Tuesday night was a Birds of a Feather (BOF) night, with plenty of BOF sessions and chalk talks scheduled. My session on Fighting Spam With Exchange Server 2007 (not a very creative title, I know… but it got the message across :) was scheduled for 7:45 PM. I was positive I’ll probably be the only […]

More →

TechEd 2007: Let’s talk about fighting spam with Exchange Server 2007

If you’re going to be at Microsoft TechEd 2007 in Orlando next week, and are interested in sharing your experiences in fighting spam using Exchange Server’s anti-spam features, here’s a Birds-of-a-feather (BOF) session just for you. What: BOF session “Fighting Spam With Exchange Server 2007“When: Tuesday, June 5th @ 7:45 PMWhere: Microsoft TechEd, Orlando, FL […]

More →

Grimes Gripes About RBLs

InfoWorld columnist Roger Grimes gripes about Real-Time Block Lists (aka Real-Time Blackhole Lists, DNSBLs or DNS-based Block Lists. The Exchange Server 2007 term for RBLs is “IP Block List Providers”). The feelings towards RBLs are understandable – you won’t be a fan of RBLs if your IP addresses are the ones getting listed, and your […]

More →

HOW TO: Expose original senders and recipients of quarantined messages

The Content Filter Agent in Exchange Server 2007 allows you to quarantine messages above the SCLQuarantineThreshold. Messages so quarantined are delivered to a quarantine mailbox, specified in the Content Filter configuration. [Read previous post for more info, “Exchange 2007 Content Filter: How to move messages to users’ Junk Mail folder“] Messages arriving in the quarantine […]

More →

Protect users from spam from your own domain in Exchange 2010 and Exchange 2007

One of the common complaints from users and many messaging folks is spam received from senders that appear to be from your own domain. SMTP mail is exchanged with anonymous Internet hosts without any authentication. Headers can be and are effortlessly spoofed. Rather than using an unregistered or invalid domain in the From: header, many […]

More →

RFC 2821, HELO again: Validating the HELO/EHLO domain

RFCs 2821 and 1869 specify the format of HELO/EHLO commands issued by a SMTP client to initiate a SMTP session. RFC 2821 on HELO/EHLO command: 4.1.1.1 Extended HELLO (EHLO) or HELLO (HELO) These commands are used to identify the SMTP client to the SMTP server. The argument field contains the fully-qualified domain name of the […]

More →

Exchange Server 2007: Managing And Filtering Anti-Spam Agent Logs

Exchange 2007 includes a number of anti-spam agents to filter spam. The anti-spam agents log their actions in (anti-spam) agent logs. The default agent log locations: Exchange 2010: \Exchange Server\V14\TransportRoles\Logs\AgentLog Exchange 2007: \Exchange Server\TransportRoles\Logs\AgentLog Agent Log Configuration You can’t change the agent log location. Here are the available config options: Enable/Disable agent log: On transport […]

More →

HOW TO: Remove values from multi-valued properties using Exchange shell

Related to the previous posts “HOW TO: Add additional email addresses to a recipient” and “HOW TO Update multi-valued attributes in PowerShell” – removing one or more values from a multi-valued property is equally easy (though not a one-liner… ). The following example shows you how to remove a domain from the list of BypassedSenderDomains […]

More →