Re: Configuring Intelligent messaging filters
- From: "Lanwench [MVP - Exchange]" <lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Sat, 1 Sep 2007 09:38:16 -0400
IT PHYTOSAN <ITPHYTOSAN@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
I found that if you use the same number on both than all is sent to
the local outlook junk mail folder and none is blocked. This is what
was causing us problems as mobile devices get an impulse to sync
although the message winds up being spam therefore consuming
bandwidth driving communication cost and wearing batteries.
Anything that goes to the Junk E-mail folder based on a server-side action
won't be active-sync'd to a handheld!
I don't outright block or reject anything. It's too difficult to deal with
false positives. The risk of blocking legit business mail is too high. The
only time I will block stuff is if I'm using software or a service that
scans before it gets to the server, and sends the users notification
messages on their preferred schedule - then they can whitelist & so forth on
their own without calling me. Postini & MailFoundry both do a nice job (and
the latter is my current fave).
Not sure where you are, but in the US, I haven't seen a "pay as you go" data
plan in a long time. They're all flat rate (at least, for corporate
accounts).
We are now running 7 to block and 6 to mark and if we continue not to
see any significant amount of false positives we might tighten the
net by one still.
As to the scanner we have now installed IMF companion which allows for
whitelisting ip addresses filtered by the intelligent messaging
filter. It is free and works very well.
Sure - but you have to sit there & monitor it, or at least be available
immediately. I'm a consultant and do not have time or resources to manage
that.
"Lanwench [MVP - Exchange]" wrote:
IT PHYTOSAN <ITPHYTOSAN@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Thank you very much for your help. I have three questions remaining:
1. What are good settings for the two parameters in intelligent
messaging filter in your experience.
I use 7 for both - and I don't block/delete/quarantine.
2. Am I right to assume that by adding @mydomain.com to the list,
external people using SMTP / PO3 type configurations will be
blocked?
It won't block relay, no - but it will prevent delivery of mail that
purports to come from a domain in the blocked senders list. I don't
tend to use POP/IMAP clients at all.
3. We have a printer / scanner that can send scans by email.
Currently this is being blocked despite its ip and email address
being on the permitted lists.
Then if its email address is anything@xxxxxxxxxx it won't go out.
You could use your ISP's SMTP server instead - or do what I do,
which is:
1) Set up a mail-enabled public folder in Exchange called Scans
(scans@xxxxxxxxxx) with an age limit of 7 days (as this is only
intended to serve as a temporary destination)
2) Configure the scanner to use scanner@xxxxxxxxxxxx as its sending
address 3) Configure the scanner to send mail directly to
scans@xxxxxxxxxx (you can usually set up a 'quick dial' thing for
this)
Users can scan to the public folder, go back to their desks & grab
the item/move/mail/save it. It's generally better to scan & review
before sending stuff on to the ultimate destination anyway!
Thanks
IT PHYTOSAN
"Lanwench [MVP - Exchange]" wrote:
IT PHYTOSAN <ITPHYTOSAN@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
We are getting a lot of spam that some of which claims to
originate from legitimate email address from our organization.
This seems a fairly easy thing to filter, but I can't seem to get
the intelligent messaging filter to do this.
IT PHYTOSAN
Presuming all the required filtering is enabled on the virtual SMTP
server, go to the Sender Filtering tab & add @mydomain.com to the
block list. This won't mess up your internal or internet mail at
all, unless someone using blah@xxxxxxxxxxxx is relaying SMTP mail
through your vsmtp server.
Also - make sure you enable recipient filtering ("addresses not in
directory") and other stuff - I personally like zen.spamhaus.org as
my sole RBL.
.
- References:
- Re: Configuring Intelligent messaging filters
- From: IT PHYTOSAN
- Re: Configuring Intelligent messaging filters
- Prev by Date: Re: ISA! - Should we?
- Next by Date: Re: WSS v3 migration
- Previous by thread: Re: Configuring Intelligent messaging filters
- Next by thread: Re: WSS 3.0 upgrade problem
- Index(es):
Relevant Pages
|