Checking our current SPAM defence plan. 1

[Deepseadata]

Hi there,

I'm left to manage Exchange 2010. I had a user forward me a spam email so I can add it to the block list. I don't know how to do that so I started searching/reading. It's getting pretty involved now. I'm surprised how long it's taking me to find answers so I though I would ask some questions to make sure I'm not missing something.

How do I add an address and or domain to a blocklist of some sort?
How can I check if I'm using a 3rd party SPAM filters?
Are there some terms I should be searching google for?

Sorry this is kind of lame to some of you.

(I have a paid support company that will fix/do anything I want. I don't really learn much that way though)

Back to the reading.

 

[Zelandakh]

Look on the hub transport server. There will be a receive connector - see if it only accepts emails from a specific place. That'll be your 3rd party spam filter. If not you may not have one.

Then check your MX record for your domain at

http://www.mxtoolbox.com

The lowest priority MX record is where your email goes.
Is that a public IP that maps to your LAN?
No? You may have third party vendors scanning your email
Yes? Check the firewall that hosts that public IP. Look for the mapping from there to the LAN.
Is that the Exchange server?
Yes? Coolio.
No? You've got another box in the link - possibly a spam gateway or maybe an AV gateway. Or both.

Goes to your Exchange server? Check software installed.
Telnet to port 25 of the Exchange server and see what response you get.

Also look at the header of an email from outside the LAN. That will have information on transport too.

 

[Deepseadata]

That was an incredible reply.

Thanks for all the things to check.