Exchange Anti-Spam Filter

Discussion in 'Networking & Security' started by Azhar, Aug 3, 2007.

  1. Azhar

    Azhar Fixing stupid since 1972

    Jan 9, 2001
    Any suggestions to what spam filter I should look into for Small Business Server 2003 R2 with Exchange Server?

    I'm currently using Trendmicro Client/Server Messaging Security 3.0 which is an all-in-one package for spam, spyware, malware, virus, content filtering, and so on. But a couple of our employees are getting spammed to oblivion anyways.

    We have about 70 employees, and just two are complaining. Yeah, I know. I told them to gtfo out porn sites. I find it odd just they're getting spammed and noone else is.

    Trendmicro Realtime Spam Monitoring is continually showing obvious spams going in and out of the Exchange server, such as or at a pace of about 1 email per 2 seconds. I'm about 5 seconds away from taking his computer away.
  2. -Sean Casey

    -Sean Casey Gawd

    Mar 27, 2004
    "in and out of the Exchange server"

    Are you sure that you have also caught this going outbound? Spam typically is inbound only, so I'd check his machine really closely (or load a fresh OS image on it). If you are seeing it outbound I'd check to see if his box was compromised.
  3. pigster

    pigster [H]ard|Gawd

    Jul 24, 2004
    The trend micro is a good start. Next, install IMF ( It's free, and it works pretty good. You may want to pick up a tool like IMF Archive Manager ( while you're tuning the filter.

    Last, get a copy of Vamsoft's ORF ( - it's pretty cheap, and adds some nice tools like a keyword list and blacklists.

    Using that combination, you should be able to block just about all spam.
  4. YeOldeStonecat

    YeOldeStonecat [H]ardForum Junkie

    Jul 19, 2004
    You using SMTP direct? Or the POP3 connector? Many anti-spam solutions won't work with the POP3 connector of SBS..they won't even peek at it.

    Try an edge appliance like or Endian. Both free.

    Did you setup the IMF in Exchange? Also free..built right into Exchange.

    Using appliances like Endian, combined with the IMF, you have a free solution, and on our clients...the combination of the 2 has been very effective.