Spam problems

[SnoopFrogg]

Lately I've been receiving spam email addressed to users that I do not have in my Active Directory database. For instance, I've been receiving several emails to xfreemailer@mydomain.com. I have gone into System Manager and selected the "Filter recipients who are not in the Directory" checkbox. For a few months, this setting seemed to work correctly. Now, in my spam filter, I notice spam destined for bogus addresses.

My understanding was that an incoming SMTP connection goes to Exchange first (which checks against RBLs, sender and recipient filtering lists) then goes to my spam filter. Thoughts?

[purple]
SnoopFrogg
MCSA+Security - Windows Server 2003
[/purple]

 

[markdmac]

Have you installed SP2? Have you configured IMF?

I hope you find this post helpful.

Regards,

Mark

 

[SnoopFrogg]

I have installed SP2.

I have not configured IMF. I am using Trend Micro's Client/Server/Messaging Suite 3.0 for anti-spam and thought this would suffice, though my confidence in the product is waning quickly. Would you recommend implementing IMF and/or Sender ID?

Also, is this an appropriate forum to seek recommendations on gateway anti-virus and anti-spam products?

[purple]
SnoopFrogg
MCSA+Security - Windows Server 2003
[/purple]

 

[SnoopFrogg]

I looked through my SMTP logs and plenty of email destined for non-legit addresses is being dropped. Whatever is making its way through must have a correct address with an incorrect displayed address. Forgive me if I'm not using this terminology correctly.

[purple]
SnoopFrogg
MCSA+Security - Windows Server 2003
[/purple]

 

[markdmac]

I've used TrendMicro for years and think they have a great AV product but I do not like their anti-spam software.

I'd configure IMF. You can grab my IMF management pages at

http://www.thespidersparlor.com/downloads/imfspam.zip.

This will give you the added ability to view and manage the archives.

I hope you find this post helpful.

Regards,

Mark

 

[SnoopFrogg]

Thanks for the reply- I'll definitely look into IMF.

I would have to agree about Trend Micro. Their AV is very good (not a resource hog and runs silent to the end user). Their anti-spam product is average in my opinion.

Thanks again!

[purple]
SnoopFrogg
MCSA+Security - Windows Server 2003
[/purple]