{"id":1208,"date":"2013-03-12T07:41:39","date_gmt":"2013-03-12T07:41:39","guid":{"rendered":"http:\/\/microsoftgeek.com\/?p=1208"},"modified":"2013-03-12T07:41:39","modified_gmt":"2013-03-12T07:41:39","slug":"how-to-deal-with-spam-in-exchange-server-2007","status":"publish","type":"post","link":"https:\/\/microsoftgeek.com\/?p=1208","title":{"rendered":"How to deal with SPAM in Exchange Server 2007"},"content":{"rendered":"<h1>Cut down on spam with IP Block List Providers (RBL)<\/h1>\n<div id=\"intelliTxt\">\n<p>One easy way to make a huge dent in the amount of spam your Exchange organization receives is to configure the IP Block List Providers anti-spam agent.\u00a0 This component checks senders against known databases of spammers, infected computers and open relays.\u00a0 Also known as real-time block lists (RBL), they are provided by a number of non-profit and for profit companies.\u00a0 From my experience I like using the free block lists provided by:<\/p>\n<ul>\n<li>SpamHaus &#8211; zen.spamhaus.org<\/li>\n<li>SpamCop &#8211; bl.spamcop.net<\/li>\n<li>Surriel &#8211; psbl.surriel.com<\/li>\n<li>SORBS &#8211; dnsbl.sorbs.net<\/li>\n<\/ul>\n<p>Adding the IP Block List provider to Exchange is very simple, just open up the Exchange Management Shell and run the command below:<\/p>\n<p>Add-IPBlockListProvider -Name SpamHaus -LookupDomain zen.spamhaus.org -AnyMatch $True -Enabled $True -RejectionResponse \u201cYour IP is on the spamhaus.org block list\u201c<\/p>\n<p>For other block list providers just modify the Name, LookupDomain and RejectionRespose.<\/p>\n<p>After you add a IP block list provider you can run get-ipblocklistprovider to list all installed.\u00a0 If you want to delete a provider run Remove-IPBlockListProvider -identity &lt;name&gt; and hit enter.<\/p>\n<p>Some IP Block List providers have test addresses that allow you to see if your block list is working.\u00a0 For SpamHaus Zen just send an e-mail to nelson-sbl-test@crynwr.com and you will get the results back via e-mail in a few minutes.<\/p>\n<p>&nbsp;<\/p>\n<h1>Check Performance of IP Block Lists (RBL)<\/h1>\n<p>The IP Block List Providers feature of the Anti-spam agents in Exchange 2007 is a valuable tool to cut down on spam from known senders.\u00a0 The sucess of the feature depends on the block list providers that you use so how can you determine if they are actually catching spam?\u00a0 Just open up the Exchange Management Shell and navigate to the scripts folder within your Exchange Server install (e.g. C:\\Program Files\\Microsoft\\Exchange Server\\Scripts\\).\u00a0 Then type in <strong>Get-AntispamTopRBLProviders.ps1<\/strong> and hit Enter.<\/p>\n<p>It can take a while to process but once completed you will see a list of each block list provider and the number of messages it blocked.<\/p>\n<div>\n<p>NAME\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 VALUE<br \/>\n&#8212;-\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 &#8212;&#8211;<br \/>\nSpamHaus\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 34223<br \/>\nSpamCop\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 452<\/p>\n<\/div>\n<p>To fine tune the results you can use the -StartDate and -EndDate parameters.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Cut down on spam with IP Block List Providers (RBL) One easy way to make a huge dent in the amount of spam your Exchange organization receives is to configure the IP Block List Providers anti-spam agent.\u00a0 This component checks senders against known databases of spammers, infected computers and open relays.\u00a0 Also known as real-time [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21],"tags":[],"class_list":["post-1208","post","type-post","status-publish","format-standard","hentry","category-exchange-2007"],"_links":{"self":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/1208","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1208"}],"version-history":[{"count":2,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/1208\/revisions"}],"predecessor-version":[{"id":1210,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/1208\/revisions\/1210"}],"wp:attachment":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1208"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1208"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1208"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}