Gerod Serafin's WebLog

Helping to keep large organizations' e-mail running

Part 4 - I used to do it this way… Now how do I do it? Administering Exchange 2003 vs. Exchange 2007

Part 4 - I used to do it this way… Now how do I do it? Administering Exchange 2003 vs. Exchange 2007

  • Comments 4
  • Likes

To return to part 1 click here

Anti-spam tasks

In Exchange 2003 we had many tools provided to help eliminate spam.  Some are Intelligent Message Filtering, Connection Filtering, and Sender ID.  As you can see below they are all configurable in the ESM on the Message Delivery Properties.

image

In Exchange 2007 these tools are still there as well as new ones like Anti-Spam Stamps.  These are viewable in Outlook 2007 by looking at the message options.  The lien X-MS-Exchange-Organization-Antispam-Report is the line that you want.

image

Attachment filtering is something new in Exchange 2007.  This is one of the few things that can not be managed via the Exchange Management Console (EMC) and can only be done via the Exchange Management Shell (EMS).  It is enabled by default on servers that have the Edge role installed.  You can determine this by using the Get-TransportAgent cmdlet.

image

In order to see the current settings you would use Get-AttachmentFilterEntry.  You would use the Type and Name fields if you wanted to make a change to those as we will see later.

image

To add a new attachment filter that filters e-mail attachments that have a specific MIME content type, use the following command:

Add-AttachmentFilterEntry -Name <MIMEContentType> -Type ContentType

In the example below we are filtering all JPEG images.

image

In the next example we are filtering all files by File name (using type FILENAME) and blocking all files that have the extension “.mov”.

image

And in the 3rd example we are blocking a particular file by name. In this case a file named “virus.ppt”.

image

To remove the filters, we use Remove-AttachmentFilterEntry and the type:name. Here we are getting rid of the filter for “virus.ppt”.

image

Now what we do when we match the filter is called the action. Below we used Get-AttachmentFilterListConfig to see the settings. Our action here is to Reject the message and issue an NDR to the user with a reject message: “Message rejected due to unacceptable attachments.”

image

You could set an action to strip the attachment or to silently delete it. 

Using the Set-AttachmentFilterListConfig command we are setting the action to strip the attachment.

image

Next:  Part 5 – More Anti-Spam Configuration in 2007

Comments
  • <p>How to Publish Microsoft Exchange Active Sync (EAS) with ISA Server 2006 (Part 1) How to troubleshoot</p>

  • <p>How to Publish Microsoft Exchange Active Sync (EAS) with ISA Server 2006 (Part 1) How to troubleshoot</p>

  • <p>How to Publish Microsoft Exchange Active Sync (EAS) with ISA Server 2006 (Part 1) How to troubleshoot</p>

  • <p>To return to part 1 click here Stop or stop Public Folder replication in 2003 vs. 2007 In Part 2, we</p>

Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment