Comments on: Spam filtering from inside sources – Exchange 2007

By: kfaganjr

kfaganjr — Wed, 09 May 2012 23:13:05 +0000

To me it sounds like you are looking at web filtering and spam filtering as an on/off only scenario with no middle ground. On top of this, stopping malware after it starts is not a good idea. Just the fact of getting on blacklists, let alone data security can cause major issues for you.

Use a combination of web filtering that won’t prevent users from doing their job, anti-spam as Gabe9527 stated, antivirus/security measures on the workstation, and education for end users so they’re not downloading malware time and time again.

Educating end users will be surprise you on the effectiveness…

By: qdogg111

qdogg111 — Mon, 17 Oct 2011 16:42:07 +0000

The hosts connect to the server via client… outgoing from the server are smtp

By: gabe9527

gabe9527 — Mon, 17 Oct 2011 15:32:02 +0000

As for how to Export the live mail – I would not know sorry.

By: gabe9527

gabe9527 — Mon, 17 Oct 2011 15:27:59 +0000

Are the connections to the Exchange server done via the outlook client or are they via Direct SMTP connections….

If the latter is the case then you can restrict the HUB TRANSPORT Server to only allow Exchange and Outlook connections.

http://exchangeserverpro.com/configuring-the-exchange-server-2007-hub-transport-server

You can install Anti-Spam on the HUB TRANSPORT – this would help with part of your issue and with sender reputation you might be able to configure the automatic blocking.

http://johanveldhuis.nl/?page_id=288&lang=en

Here is how to block senders in Exchange 2007
http://exchangeserverpro.com/restricting-outbound-email-with-exchange-server-2007-transport-rules

And lastly if there is a pattern to the emails then Rules can be setup to delete / quarentine the mail
http://www.msexchange.org/tutorials/transport-rules-exchange-server-2007.html