+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 29
Enterprise Software Thread, exchange 2010 spam filter in Technical; the built in junk mail filter does a good job of moving spam to the junk mail folder, but is ...
  1. #1

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,531
    Thank Post
    1,341
    Thanked 470 Times in 307 Posts
    Blog Entries
    6
    Rep Power
    200

    exchange 2010 spam filter

    the built in junk mail filter does a good job of moving spam to the junk mail folder, but is there a setting to set it to just delete it straight aay and not even bother putting it into the junk mail folder?

    Or is there a decent free spam filter that works seamless with 2010 ?

  2. #2

    Join Date
    Dec 2009
    Location
    London
    Posts
    7
    Thank Post
    0
    Thanked 2 Times in 2 Posts
    Rep Power
    0
    If you've got the MS schools agreement, try forefront 2010 for exchange. Works reasonably well at no extra cost.

  3. Thanks to wiwo from:

    RabbieBurns (2nd May 2011)

  4. #3

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,531
    Thank Post
    1,341
    Thanked 470 Times in 307 Posts
    Blog Entries
    6
    Rep Power
    200
    I tried the demo of forefront for exchange 2010 and it completely crippled the system.

    Its just a test box just now but it went from using 10% cpu and 31% of the 4gb ram, to 100% and 90% respectively. So much so that it couldnt even send or recieve any mail at all.

    Ive only got 4 mailboxes.

    Anyone got another alternative solution?

  5. #4


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,485
    Thank Post
    867
    Thanked 854 Times in 675 Posts
    Rep Power
    197
    If you are evaluating SchoolGuardian, you could try our anti-spam module - if you have SMTP incoming mail, it will let you just not receive the spam, tag it, or quarantine it.

  6. Thanks to tom_newton from:

    RabbieBurns (2nd May 2011)

  7. #5

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,234
    Thank Post
    894
    Thanked 1,780 Times in 1,534 Posts
    Blog Entries
    12
    Rep Power
    462
    In Exchange 2007 there was a free one with it. You need to enable it in powershell.

    Not sure if it is still in 2010

  8. Thanks to FN-GM from:

    RabbieBurns (2nd May 2011)

  9. #6

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,531
    Thank Post
    1,341
    Thanked 470 Times in 307 Posts
    Blog Entries
    6
    Rep Power
    200
    I was using Zen.spamhaus as a blocklist for Exchange and it was working great.

    I then tried Forefront for Exchange for a couple of months, and disabled spamhaus.

    Ive since uninstalled forefront, re-enabled the spamhaus blocklist, but Im now getting like 30 spams a day; I don't think the Zen blocklist is working properly. Is there any way to check whats going on?

  10. #7

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,144
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    77
    @Rabbie

    spamhaus blocklist is just one blacklist. Although it is maintained, it is not up to date in realtime and wont pickup new threats/AS sources unless they have been reported. Whereas using FPE 2010 uses other engines to identify AS too. FPE 2010 uses clourmark (on top of my head) and others too.

    I wouldn't just use spamhaus blocklist as a layer of defense from spam. This needs to be combined with configurations, such as SPF records, reverse DNS, and a commercial SPAM product.

    Sukh

  11. Thanks to sukh from:

    RabbieBurns (2nd May 2011)

  12. #8

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,531
    Thank Post
    1,341
    Thanked 470 Times in 307 Posts
    Blog Entries
    6
    Rep Power
    200
    @sukh Its just a VM in a dev environment and FP was taking up way to much resources.

    Ive deleted the smaphaus entry, and readded it, and it seems to have nipped the spam in the bud, not had any today at least. Will see how it goes.

    We use a 3rd party appliance in production which does all spam and av etc.

  13. #9
    bodminman's Avatar
    Join Date
    Apr 2007
    Location
    Sunny Suffolk
    Posts
    1,163
    Thank Post
    734
    Thanked 224 Times in 116 Posts
    Rep Power
    90
    We use a Canadian company called SmartServers.com and they're a) good b) cheap!

    Within 24hours of diverting our mail via them, the reports of SPAM being received into mailboxes/Junk folders ceased. They have a control panel you can log in to so that you can check mail etc and have it delivered should you wish. It's great!

    I think for a year we pay $550 (£350 ish)

    PM me if you would like any contact details.

  14. #10

    ZeroHour's Avatar
    Join Date
    Dec 2005
    Location
    Edinburgh, Scotland
    Posts
    5,699
    Thank Post
    950
    Thanked 1,355 Times in 828 Posts
    Blog Entries
    1
    Rep Power
    451
    Quote Originally Posted by RabbieBurns View Post
    I tried the demo of forefront for exchange 2010 and it completely crippled the system.

    Its just a test box just now but it went from using 10% cpu and 31% of the 4gb ram, to 100% and 90% respectively. So much so that it couldnt even send or recieve any mail at all.

    Ive only got 4 mailboxes.

    Anyone got another alternative solution?
    Certainly ram usage there was not thanks to forefront I would have thought because ex2010 always sucks up all the ram it can over a period of time. We had 12gb and exchange would vacum it all up.
    We used Puremessage and tbh for the cost it was very very good. No issues and we could run it on an smtp box separate from exchange itself which was great.

  15. Thanks to ZeroHour from:

    RabbieBurns (2nd May 2011)

  16. #11

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,531
    Thank Post
    1,341
    Thanked 470 Times in 307 Posts
    Blog Entries
    6
    Rep Power
    200
    aye, that old install was on virtualbox on a linux host which probably wasn't the wisest. It runs a lot lot better under hyper v now; FFP was actually useable. But the box only has 8gb ram in it and exchange is using 2gb; with FFP installed it was demanding 4.5gb.

  17. #12

    ZeroHour's Avatar
    Join Date
    Dec 2005
    Location
    Edinburgh, Scotland
    Posts
    5,699
    Thank Post
    950
    Thanked 1,355 Times in 828 Posts
    Blog Entries
    1
    Rep Power
    451
    Quote Originally Posted by RabbieBurns View Post
    aye, that old install was on virtualbox on a linux host which probably wasn't the wisest. It runs a lot lot better under hyper v now; FFP was actually useable. But the box only has 8gb ram in it and exchange is using 2gb; with FFP installed it was demanding 4.5gb.
    I would certainly give puremessage a try, you can set it up on an off domain smtp box running 2003 etc then just route mail through to it exchange. It also does non-mailbox checks too so mail to addresses not in exchange get deleted and cut-off before it gets to exchange which is very nice. Also try smoothwalls out as I am sure its good

  18. Thanks to ZeroHour from:

    RabbieBurns (2nd May 2011)

  19. #13

    RabbieBurns's Avatar
    Join Date
    Apr 2008
    Location
    Sydney
    Posts
    5,531
    Thank Post
    1,341
    Thanked 470 Times in 307 Posts
    Blog Entries
    6
    Rep Power
    200
    Cheers, but as I said previously, this is just a test VM in a dev environment, and only has 1 mailbox.

    In production we use the FortiGuard firewall appliance with the FortiMail add-on which does all our Spam needs.

  20. #14

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,144
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    77
    @Rabbie

    Both Antigen and FPE use multiple engines. I've seen cases whereby all engines have been selected and performnace settings have noe been tweaked. I'd recommend using one engine for updates and for scanning. There's a number of settings which you can play with to tweak performance.

    See the link below. I've used this in the past many times. Check out section 2.1

    Forefront Protection 2010 for Exchange Server (FPE) Capacity Planning Guidance v. 2 - Microsoft Forefront Server Protection Blog - Site Home - TechNet Blogs

    I'd also use the planning tool to get a good idea on performance.

    Download details: Forefront Protection 2010 for Exchange Server Capacity Planning Tool

    Sukh

  21. Thanks to sukh from:

    RabbieBurns (2nd May 2011)

  22. #15

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,241
    Thank Post
    882
    Thanked 2,743 Times in 2,317 Posts
    Blog Entries
    11
    Rep Power
    784
    Quote Originally Posted by sukh View Post
    @Rab bie

    Both Antigen and FPE use multiple engines. I've seen cases whereby all engines have been selected and performnace settings have noe been tweaked. I'd recommend using one engine for updates and for scanning. There's a number of settings which you can play with to tweak performance.

    See the link below. I've used this in the past many times. Check out section 2.1

    Forefront Protection 2010 for Exchange Server (FPE) Capacity Planning Guidance v. 2 - Microsoft Forefront Server Protection Blog - Site Home - TechNet Blogs

    I'd also use the planning tool to get a good idea on performance.

    Download details: Forefront Protection 2010 for Exchange Server Capacity Planning Tool

    Sukh
    +1 FPG is great but sucks back resources like an alcoholic west aucklander sucks back bourbon. You really need to configure it to use less of the engines at a lower priority and lower the max thread count along with in some cases disabling the ailbox scanner as it checks the whole mailbox each time which as it is filtered on the way in is double handling. I have it on a VM with Exhange and 6GB of RAM (only 10-15 users) on a server with just two cores at 2GHz and it is slow in the UI but still works quick behing the scenes. You are right though that it will fight Exchange for resources. In my experience though the results were fantastic and it has to rate as one of the best systems that I have used for actual filtering ability.
    Last edited by SYNACK; 2nd May 2011 at 08:08 PM.

  23. Thanks to SYNACK from:

    RabbieBurns (6th May 2011)

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. 2010 issue with spam filter
    By browolf in forum CLEO
    Replies: 1
    Last Post: 12th January 2010, 09:26 AM
  2. Spam Assassin 2010 issue heads up
    By localzuk in forum *nix
    Replies: 3
    Last Post: 2nd January 2010, 03:00 PM
  3. Spam filter?
    By contink in forum Comments and Suggestions
    Replies: 4
    Last Post: 22nd May 2009, 12:47 AM
  4. Spam filter for Outlook
    By flashsnaps in forum Windows
    Replies: 4
    Last Post: 5th November 2008, 04:17 PM
  5. Spam, spam, spam, spam, spam, beans, sausage, spam.
    By indie in forum How do you do....it?
    Replies: 14
    Last Post: 13th June 2006, 07:39 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •