Improving anti-spam configuration

Hi all.

Could anyone tell me if there is a way of creating a "rule" to block a 
particular type of spam?

Most of the spam that gets through to my mail server these days is generally 
"from" and "to" an internal email address, i.e.:

From: me@mydomain.com To: me@mydomain.com

Is there a feasible way of blocking such email without significantly 
increasing chances of false positives?

Any pointers appreciated...

Regards,

Paul 

0
Paul
2/6/2010 9:22:50 PM
exchange.admin 57650 articles. 1 followers. Follow

3 Replies
498 Views

Similar Articles

[PageSpeed] 43

On Sat, 6 Feb 2010 21:22:50 -0000, "Paul Kelly" <nospam@example.com>
wrote:

>Could anyone tell me if there is a way of creating a "rule" to block a 
>particular type of spam?
>
>Most of the spam that gets through to my mail server these days is generally 
>"from" and "to" an internal email address, i.e.:
>
>From: me@mydomain.com To: me@mydomain.com
>
>Is there a feasible way of blocking such email without significantly 
>increasing chances of false positives?
>
>Any pointers appreciated...

Create a TXT record for your domain and publish the set of IP
addresses that you authorize to send e-mail on behalf of your domain.
Then configure SenderID on your server and set it to refuse any e-mail
from your domain that doesn't emanate from the set of authorized IP
addresses.

http://openspf.org
http://www.microsoft.com/senderid

Not only will that pretty much eliminate the type of spam you're
encountering, but it will also help other e-mail systems to refuse
e-mail that pretends to be from your domain but was sent from
unauthorized IP addresses.

Note that SPF and SenderID are anti-spoofing mechanisms. They aren't
anti-spam.
---
Rich Matheisen
MCSE+I, Exchange MVP
0
Rich
2/7/2010 12:22:49 AM
Thanks for a useful suggestion! However, I fear it may be slightly more 
complicated as I use Dynamic DNS (from DnyDNS.com) and their MailHop service 
for inbound email.

Is it likely to still work?

Looks like I need to read up a bit and see how it can apply in my case...

Thanks again...

Paul

"Rich Matheisen [MVP]" <richnews@rmcons.com.NOSPAM.COM> wrote in message 
news:7m1sm55i4tss25k2033ukmqobk2q6vc16q@4ax.com...
> On Sat, 6 Feb 2010 21:22:50 -0000, "Paul Kelly" <nospam@example.com>
> wrote:
>
>>Could anyone tell me if there is a way of creating a "rule" to block a
>>particular type of spam?
>>
>>Most of the spam that gets through to my mail server these days is 
>>generally
>>"from" and "to" an internal email address, i.e.:
>>
>>From: me@mydomain.com To: me@mydomain.com
>>
>>Is there a feasible way of blocking such email without significantly
>>increasing chances of false positives?
>>
>>Any pointers appreciated...
>
> Create a TXT record for your domain and publish the set of IP
> addresses that you authorize to send e-mail on behalf of your domain.
> Then configure SenderID on your server and set it to refuse any e-mail
> from your domain that doesn't emanate from the set of authorized IP
> addresses.
>
> http://openspf.org
> http://www.microsoft.com/senderid
>
> Not only will that pretty much eliminate the type of spam you're
> encountering, but it will also help other e-mail systems to refuse
> e-mail that pretends to be from your domain but was sent from
> unauthorized IP addresses.
>
> Note that SPF and SenderID are anti-spoofing mechanisms. They aren't
> anti-spam.
> ---
> Rich Matheisen
> MCSE+I, Exchange MVP 

0
Paul
2/7/2010 3:20:27 PM
On Sun, 7 Feb 2010 15:20:27 -0000, "Paul Kelly" <nospam@example.com>
wrote:

>Thanks for a useful suggestion! However, I fear it may be slightly more 
>complicated as I use Dynamic DNS (from DnyDNS.com) and their MailHop service 
>for inbound email.
>
>Is it likely to still work?

It is if you use either a static IP address to send your e-mail from,
or use a SMTP relay that uses a static IP address.

An alternative is to NOT accept e-mail from your own domain. If
everyone in your organization uses Outlook with MAPI/RPC or
RPC-over-HTTPS connectins, or OWA that shouldn't much of a problem.
---
Rich Matheisen
MCSE+I, Exchange MVP
0
Rich
2/7/2010 4:54:41 PM
Reply:

Similar Artilces:

Is restore last known good configuration the same as restore a
Is restore last known good configuration the same as restore a previous registry? . wrote: > Is restore last known good configuration the same as restore a previous > registry? LKGC are the system settings used when the OS last loaded successfully. IF one restarts the system *more* than THREE times, then LKGC will no longer be able to load. 'restore a previous registry' is *not* the same and can be any previous backup of the registry; whether it actually loads the OS or not depends on the integrity of the backed up registry. Why do you ask ? MowG...

Bizarre Spam?
I received a spam message the other day and it contained some very strange things. It was the usual HTML crap "I sent you an email a few days ago because you now qualify for a new mor tgage. You could get a $300,000 for as little as $700 a month! credit is no pr oblem, you can pull cash out or ref inance." It also had the usual random characters in the subject line. The strange thing was that some text(see below ) was inserted below the message in a 2.5 pt font in a almost invisible light blue color. The text was really bizarre, unrelated words. Does anyone know what this is or wh...

Gmail Configuration
Is there a way to configure Outlook 2007 so that when I open it up to retrieve my gmail email it only shows that inbox and not the personal folders? "Stu Parker" <StuParker@discussions.microsoft.com> wrote in message news:916D2544-35E4-46AF-930A-28E988135CED@microsoft.com... > Is there a way to configure Outlook 2007 so that when I open it up to > retrieve my gmail email it only shows that inbox and not the personal > folders? Not if you are accessing the gmail mailbox with an IMAP account. IMAP accounts always have their own folder sets. -- Bri...

How would I know if someone is sending spam from our server?
I'm new the MS Exchange and being an admin, but here I am. We have SBS 2003 with Exchange and I've been seeing some strange email activity as of late. Is there a way to tell if someone is using our server to send spam? Can anyone suggest a few basic measures besides limiting the size of a users mailbox or number of recipients for protecting against something like this? We have Trend Micro's Office Scan for Exchange for virus protection and some spam filtering. If you've left the Exchange SMTP server settings at their default, it will only relay for the domain(s) you ...

Spam Server before Exchange (Brightmail)
I Currently have McAfee SpamKiller for Exchange installed on a Exchange 2003 Server. It catches a lot of spam (moves it to the Junk E-Mail folder) but not all of it. I'm thinking of adding an additional server as a front end to scan for spam before it gets to the exchange server. I was thinking of installing Symantec Brightmail for exchange on the first machine then forwarding the email to the exchange server. Does anyone have any experience with this? Ed Brightmail is one of the good products that are out there. There are currently quite a few good anti-spam products on the mark...

Any Body Successfully Configured IIFP
I have tried it, but failed. Any body can help me please. I have succesflly created and run all Managment agent, but it didn't import or export E-mail ids. I have main confustion with Target and sourse. For example I have Test01 and test02 forests. What we have to select as Target and sourse. Both will be OUs on the same forest? Its very urgent for me. Please help me. ...

Improve Customer Source Website
My suggestion is to improve the navigation to find simple instructions for installation of such things as Great Plains client software. What a navigational mess just to find some basic information. All I am trying to find is some information on how to load a client for Great Plains 7.5. I have to reinstall the software and there are about 4 basic steps, but I do not remember the exact sequence. It should not be this difficult just to find basic steps such as how to load the software. From my experience, Microsoft is floods areas with information to fix this bug and fix that, but j...

Spoofed spam
In the past two years I've received hundreds of spams supposedly sent by myself, from many different sources. Therefore, I added my own email address to my Blocked Sender's List. But recently, I've started to receive spam that the Blocked Sender's List doesn't block. How does this happen? Is there any practical way to deal with the issue? By the way, I'm sure that no virus is involved. Norton doesn't find anything and I always practice safe email practices. Thanks. Charley Kyd Try SpamBayes - it is a wonderful filter that constantly learns. Works very wel...

Outlook 2003 Spam Fighting Problem
I'm having problems getting the spam filters to work properly in Outlook 2003. I have multiple e-mail accounts set up in Outlook with e-mail being redirected to folders with the Rules/Alerts command. The problem is that the Rules seem to be redirecting e-mail to folders after the spam filter does its thing. So, nothing is being filtered as spam (even though I have mail domains listed as Blocked Senders). I would like to get this working feature working properly. The alternative is switching to Thunderbird which I don't want to do. Any help would be appreciated. Thanks. Installed O...

Mail that ends up in spam folder
I keep getting e-mail messages that are from my president that do into my spam folder instead ofmy inbox. I tried making a rule but the e-mail still goes to spam. How do i fix this Sorry Windows XP SP2, Outlook 2003 "TOM" wrote: > I keep getting e-mail messages that are from my president that do into my > spam folder instead ofmy inbox. I tried making a rule but the e-mail still > goes to spam. How do i fix this "TOM" <TOM@discussions.microsoft.com> wrote in message news:13577C66-69AF-4EE6-B895-DF1E0721EAF3@microsoft.com... >> I keep getting e-...

Advice on how to fight spam
I am using GFI Mail Essentials. I see that the filter is correctly catching spam is sending it to "Inbox/Junk" folder for the respective users. The GFI MailEssential reports indicate that 70% of e-mail we receive is spam! In the past I deleted e-mail detected as spam, but then few false-positives were deleted and people got mad. Therefore I just tag and forward to the "junk" subfolder for the respective user instead. Then I instructed them to review their "Inbox/Junk" folder in case they need to search for missing e-mails - OK. One user is questioning why ...

Improvement?
How's the back? Better I hope. Lots of yard work today, making me tired. Also lots of paperwork, and finished Arms and the Man. All is well. Love, Chuck. -- ---------- CWLee Former slayer of dragons; practice now limited to sacred cows. Believing we should hire for quality, not quotas, and promote for performance, not preferences. ...

ironport anti-spam question
Hi all - I know that this really isn't 'exchange centric', but most of us are also tasked with spam elimination. I'm going to forklift out my current abismal AS solution, and looking hard at an Ironport appliance. Any feedback would be appreciated from their current or previous customers. Thanks. Danny Replaced our mimesweeper box with an ironport box about a year ago - handles both av (sophos engine) & anti spam through IPAS rather than Brightmail - no problems with either, just a learning curve with the async os that runs on the ironport. Have used Ironport ...

improved chart in Excel
Good day, I am looking for a way to create bar charts in Excel where the width of the bar can be varied according to a variable. For example the Y axis would show Exports Per Capita for a number of cvountries, the X axis would give the Population of each country shown. Thus the area of each bar (or column) would give total Exports. Any tips would be appreciated. Bonsour=C2=AE Dion avec ferveur ;o))) vous nous disiez :=20 > Good day, I am looking for a way to create bar charts in Excel where > the width of the bar can be varied according to a variable. >=20 > For example ...

report spam button in Outlook
I'm not interested in blocking spam. I want a utility in Outlook or Outlook Express that works like SpamCop. I want to be able to select multiple spam emails and then press a button that automatically reports spam to the network administrator of the internet service provider the spammers are using. Is there an add-in or VBA code for Outlook to do this? I currently use www.spamcop.net to do this, but this is not practical for reporting more than 20 spam emails at a time because you have to send the reports one by one. Jeff No, currently Microsoft leaves this market to third parties....

Improvements
All of the suggestions below might have already been submitted. If so I am simply adding my voice to the chorus: 1) In form design it is possible to consolidate a number of objects (text fields, boxes, etc.) in a group. A feature I woulk like to see is to be able to name a group and then programmatically be able to set the whole group visible property (and/or some other properties) to true or false (e.g. groupname.visible = true and groupname.visible=false). This would make disappear/appear a whole lot of controls without having to identify them one by one in the VBA code. 2) Provide a...

how do you stop spam?
I'm taking care of a Windows NT Server (4) with Exchange 5.5 SP2 installed. We have around 40 employees in the company and they have been complaining about spam. Desktops are running Outlook 2000. Is there a way to stop spam without installing a third party software? Any help is appreciated. Thanks. there is an open source one available. i think it is on sourceforge.net. search for smtp. mike "Peter McCaul" <compcoff@hotmail.com> wrote in message news:ujtLb2riEHA.1140@tk2msftngp13.phx.gbl... > I'm taking care of a Windows NT Server (4) with Exchange 5.5 SP2...

No Improvements in 2004
It's unbelievable! No improvements whatsoever in 2004 vs. 2003! All of the same bugs are still present. Performance is still as poor as with 2003. I was really expecting SOMETHING to have improved! If the product cycle was 2 years - everyone would expect to use MS Money 2003 until 2005. Just because they call it Money 2004 doesn't mean that it has changed the product - only the marketing effort. That being the case - why upgrade every year? The auto industry makes a big deal out of the model year change over - but I don't go out a buy a new car every year. Why should I expec...

workflow designer needs improvement
It's a real pain to modify existing workflow. It would be nice to be able to drag and drop existing workflow lines, shuffling them around and more easily insert if-then-else code after the fact. The entire workflow designer needs to be revamped. ---------------- This post is a suggestion for Microsoft, and Microsoft responds to the suggestions with the most votes. To vote for this suggestion, click the "I Agree" button in the message pane. If you do not see the button, follow this link to open the suggestion in the Microsoft Web-based Newsreader and then click "I Agr...

Improve consistency in how Excel and Word 2003 close.
If you have >1 Word document open, the "BIG X" closes only the current document. (It behaves the same way as if you want to close one document with the "little "X".) In Excel, if you hit the "big X", you close all open spreadsheets. I don't care which way you go, but do it the same way in each. One could argue in either direction, but this fuzziness has lead me to lose a lot of work, particularly when I am rushing to meet a deadline. Yes, it's my error, but.... ---------------- This post is a suggestion for Microsoft, and Microsoft respo...

Meaning of "application configuration is incorrect"?
An end-user of my just-installed application tells me that the app will not run "because the application configuration is incorrect. Reinstalling the application may fix the problem". The user tried reinstalling but it did not fix the problem. Does anybody know the cause of this message, or how to overcome the problem? I'm not sure I know what an "application configuration" is, in this context. I'm using Visual C++ 6.0. The app was installed on Windows XP. -- Wayne Gould. http://www.logos.com/ArticleViewer/336 "Wayne Gould" <WayneGould@discus...

How do i configure AVS settings.
In 2.0 credit cards have the use of using AVS but how do i configure what to reject. say if the billing info is wrong or if the zip code is wrong? ...

Spam filter in Outlook 2000
Problem: I want to edit my spam filter in Outlook 2000, which runs on Office XP. In particular, I want to disable the filter for the word "Advertisement" in the subject line. The spam/adult filters are contained, AFAIK, in C:\Program Files\Microsoft Office\Office\filters.txt. I've tried editing this this but with no effect. Windows Explorer can find it easily enough, but Outlook doesn't seem to be picking up on the changes I make to filters.txt. It's certainly using some file to filter on, since I can change the colour of spam/adult mails easily enough...

Improved CSplitterWnd
Hello newsgroup, I'm trying to write an improved version of the CSplitterWnd that ships with MFC 6.0. The reason why I do this is that I cannot set an window that is already created into one of the panes (I have to use the CreateView method, which is quite annoying). Also the implementation of CSplitterWnd assumes, that my CWnd derived objects will delete themselves when they receive a WM_DESTROY (one has to look into the source code to find this assumption, I didn't find it in the documentation :( The first hurdle I have to take is the automatically computed child ID that is...

color printing improvement
No matter the color printer, Photoshop color printing is much better that Publisher 2003. How to improve publisher colors? ...