|
|
Question : Exchange 2007 Anti-Spam Agents not working well after SP1 applied
|
|
This past Friday night we applied SP1 to our two Exchange 2007 servers. One is a CAS/Hub with Anti-Spam Agents installed, and the other is the Mailbox server. There is no clustering involved, nor is there an Edge Transport server.
Prior to this weekend, our Content Filter was set so that messages with an SCL of 8 were quarantined, and messages with an SCL of 9 were rejected. This was working amazingly well. I personally never saw any junk mail and users reported at least a 90% reduction in spam.
Very shortly after applying SP1 (first to the CAS/Hub server, then to the Mailbox server), I got 2 new spam messages. I checked all the settings to make sure nothing had changed. The only difference I could find was that the IP Allow and Block lists strangely were no longer accessible under the Organization Anti-Spam Tab (you now have to access those under Server Configuration\Hub Transport for some reason), but my Content Filtering appeared unchanged. I was still getting all kinds of junk in our quarantine mailbox. I disabled/re-enabled Content Filtering and even rebooted the server for good measure. But by Saturday morning I already had users complaining of junk mail, and I was still receiving some myself.
Saturday night I finally just turned everything up a notch (quarantine at SCL7, reject at SCL8), but after doing that I've still received a few junk mails, and that means even more for my more spam-magnetic users. Quarantine is still catching hundreds of messages a day.
Does anyone have any info on what SP1 might have changed as far as Content Filtering/Junk Mail? I Googled for awhile but either my Google-Fu was weak this weekend or there's just not a lot of info on this issue.
Here's my contentfilterconfig, though I'm not sure it would be of any use:
Name : ContentFilterConfig RejectionResponse : Message rejected as spam by Content Filtering. OutlookEmailPostmarkValidationEnabled : True BypassedRecipients : {} QuarantineMailbox : [email protected] SCLRejectThreshold : 8 SCLRejectEnabled : True SCLDeleteThreshold : 8 SCLDeleteEnabled : False SCLQuarantineThreshold : 7 SCLQuarantineEnabled : True BypassedSenders : {} BypassedSenderDomains : {} Enabled : True ExternalMailEnabled : True InternalMailEnabled : False AdminDisplayName : ExchangeVersion : 0.1 (8.0.535.0) DistinguishedName : CN=ContentFilterConfig,CN=Message Hygie ne,CN=Transport Settings,CN=DOMAIN,CN =Microsoft Exchange,CN=Services,CN=Conf iguration,DC=austx,DC=DOMAIN,DC=com Identity : ContentFilterConfig Guid : bd319e80-6111-4aef-9999-1b7c365ff9dd ObjectCategory : austx.DOMAIN.com/Configuration/Schema /ms-Exch-Message-Hygiene-Content-Filter -Config ObjectClass : {top, msExchAgent, msExchMessageHygiene ContentFilterConfig} WhenChanged : 1/19/2008 9:13:54 PM WhenCreated : 8/14/2007 10:32:03 AM OriginatingServer : DOMAINCONTROLLER.austx.DOMAIN.com IsValid : True
|
Answer : Exchange 2007 Anti-Spam Agents not working well after SP1 applied
|
|
1- update the exchange spam agent and make sure that spam autoupdate is running. 2- try to lower the SCL rate
|
|
|
|
|