Announcement

Collapse
No announcement yet.

Exchange Server 2007 Anti-Spam Issue

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Exchange Server 2007 Anti-Spam Issue

    Hello Petri!!

    This is one of my first times posting...

    I have an SBS 2008 machine that is running Exchange Server 2007. The Spam filter seems to be effective for the whole domain (15 users) except for 1 e-mail account/user.

    To start off I have previously entered this command in EMS -> set-mailbox -identity USER -antispambypassenabled $false -SCLJunkEnabled $true -SCLJunkThreshold 4

    Despite having done this and rebooted the server, e-mails with headers like this continue to come through (150+ spam e-mails a day):

    Received: from dcs845525f503c.home (182.185.49.92) by remote.***.ca
    (192.168.1.2) with Microsoft SMTP Server id 8.1.240.5; Mon, 7 Nov 2011
    10:48:39 -0400
    Received: (qmail 0147 by uid 147); Mon, 7 Nov 2011 06:45:41 +0800
    From: Enlarge with Free trial <[email protected]>
    To: <[email protected]***.ca>
    Subject: Portugal regrets not bringing herbal supplements
    Date: Mon, 7 Nov 2011 06:29:25 +0800
    Message-ID: <[email protected]>
    MIME-Version: 1.0
    Content-Type: multipart/alternative;
    boundary="----=_NextPart_000_0061_01CC9D19.41FF5EE0"
    X-Mailer: Microsoft Office Outlook 12.0
    Thread-Index: Acjoiteomg8r3K3ARB+9MiUmcDoT5A==
    Content-Language: en-us
    Return-Path: [email protected]
    X-MS-Exchange-Organization-PRD: wikipedia.org
    X-MS-Exchange-Organization-SenderIdResult: None
    Received-SPF: None (***.***.local:
    [email protected] does not designate permitted sender
    hosts)
    X-MS-Exchange-Organization-SCL: 5
    X-MS-Exchange-Organization-PCL: 2
    X-MS-Exchange-Organization-Antispam-Report:
    DV:3.3.5705.600;SID:SenderIDStatus
    None;TIME:TimeBasedFeatures;OrigIP:182.185.49.92

    *Domain and User Names have been removed for security purposes

    The question: Why are e-mails with an SCL rating of 5 coming through to this user if I have specifically set his mailbox to an SCLJunkThreshold of 4??

    Any contributions are welcome, I have been working on this issue for far too long and would like to get it fixed.

    Thanks!!
Working...
X