Exchange Anti-Spam Filter

[Azhar]

Any suggestions to what spam filter I should look into for Small Business Server 2003 R2 with Exchange Server?

I'm currently using Trendmicro Client/Server Messaging Security 3.0 which is an all-in-one package for spam, spyware, malware, virus, content filtering, and so on. But a couple of our employees are getting spammed to oblivion anyways.

We have about 70 employees, and just two are complaining. Yeah, I know. I told them to gtfo out porn sites. I find it odd just they're getting spammed and noone else is.

Trendmicro Realtime Spam Monitoring is continually showing obvious spams going in and out of the Exchange server, such as taxdonations.com or landmarkhealthcare.com at a pace of about 1 email per 2 seconds. I'm about 5 seconds away from taking his computer away.

 

[-Sean Casey]

"in and out of the Exchange server"

Are you sure that you have also caught this going outbound? Spam typically is inbound only, so I'd check his machine really closely (or load a fresh OS image on it). If you are seeing it outbound I'd check to see if his box was compromised.

 

[pigster]

Any suggestions to what spam filter I should look into for Small Business Server 2003 R2 with Exchange Server?

The trend micro is a good start. Next, install IMF (http://technet.microsoft.com/en-us/exchange/bb288484.aspx). It's free, and it works pretty good. You may want to pick up a tool like IMF Archive Manager (http://hellomate.typepad.com/exchange/2004/06/imf_archive_man.html) while you're tuning the filter.

Last, get a copy of Vamsoft's ORF (www.vamsoft.com) - it's pretty cheap, and adds some nice tools like a keyword list and blacklists.

Using that combination, you should be able to block just about all spam.

 

[YeOldeStonecat]

You using SMTP direct? Or the POP3 connector? Many anti-spam solutions won't work with the POP3 connector of SBS..they won't even peek at it.

Try an edge appliance like www.untangle.com or Endian. Both free.

Did you setup the IMF in Exchange? Also free..built right into Exchange.

Using appliances like Endian, combined with the IMF, you have a free solution, and on our clients...the combination of the 2 has been very effective.