RE: Spam filter for Exchange 5.5 internal e-ma il

  • From: "John Tolmachoff \(Lists\)" <johnlist@xxxxxxxxxxxxxxxxxxx>
  • To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
  • Date: Wed, 29 Jun 2005 00:15:27 -0700

Sounds like you have the wrong AV software. True, there are now viruses out
that can not be scanner by a AV scanner as they are inside of a encrypted
password-protected zip. If the message uses known items such as subject,
file name and body content or combinations of such the AV scanner can find
it by association, meaning that if it smells like poo, looks like poo, it
must be poo. However, that can be problematic for known items, and almost
impossible if the message contains unknown or a large volume of variables.
Better software are those that will ALSO in addition to traditional AV
scanning then check for other elements, such as potentially malicious files
such as exe files, including those within a password encrypted zip. You can
see what the file name is in the password encrypted zip, but you can not
access it without authenticating.

 

Since I am not familiar with Exchange 5.5 I can not offer a direct
recommendation, but a general one is to track using logs how much messages
from who, and should a alarm go off act quickly. 

 

I will say instead of trying to filter the spam going out, stop it at the
client. If you have to, cut off all client until you can isolate the
infected one.

 

John T

eServices For You

 

-----Original Message-----
From: NGUYEN HONG HA [mailto:HANH.EVNIT@xxxxxxxxxx] 
Sent: Tuesday, June 28, 2005 11:50 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Spam filter for Exchange 5.5 internal e-ma il

 

http://www.MSExchange.org/

Yes.

Sometimes a virus infects a client and then generates a lot of spam e-mails.
Unfortunately, our anti virus program cannot scan these e-mails, so it
spread out quicly. From the Exchange 5.5 Server, I want to delete all
e-mails basing on the criterias such as subjects, sender or the content of
the e-mail.

I know that a lot products support this feature for SMTP, but we use Site
Connector for the internal e-mail system. Can any product help us ?

Thanks a lot.

Ha.

 

  _____  

From: Sarbjit Singh Gill [mailto:ssgill@xxxxxxxxxxxxxxxxxxxx] 
Sent: Wednesday, June 29, 2005 10:42 AM
To: [ExchangeList]
Subject: [exchangelist] RE: Spam filter for Exchange 5.5 internal e-mail

 

http://www.MSExchange.org/

Internal spam email ? You mean spam is generated internally ? 

 

I know of mail from internet being spam mail. Why don't you stop it at the
entry point of SMTP. Check out www.msexchange.org for list of spam control
products.

 

/Gill

 

 


  _____  


From: NGUYEN HONG HA [mailto:HANH.EVNIT@xxxxxxxxxx] 
Sent: Wednesday, June 29, 2005 9:09 AM
To: [ExchangeList]
Subject: [exchangelist] Spam filter for Exchange 5.5 internal e-mail

http://www.MSExchange.org/

Dear everyone,

Our e-mail system has 20 Exchange 5.5 servers, which use Site connectors. Is
there any products that can filter internal spam e-mail ?

Thank you very much.

Ha.

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
ssgill@xxxxxxxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
hanh.evnit@xxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
johnlist@xxxxxxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx 

Other related posts: