How to configure anti-spam in hub transport

i have run the powershell commands to enable anti-spam on my hub transport. i do not have an edge transport.. are there any specific commands or configs i need to make other than enabling anti-spam? Im getting spam inside my organization from ip's that are
blacklisted on the internet, so that leads me to believe anti-spam is not working..
any assistance appreciated!

The anti-spam features that are enabled on hub transports are very basic.:
http://technet.microsoft.com/en-us/library/bb201691(v=exchg.141).aspx
You should use 3rd party or a cloud provider for "real" anti-spam functionality.
Twitter!: Please Note: My Posts are provided “AS IS” without warranty of any kind, either expressed or implied.

Similar Messages

HT203200 Have deleted temp video, configured anti spam and firewall, and one specific video keeps giving me an error. Just tried downloading a previous episode of the show and it worked just fine. Always sunny in philly "Charlie rules the world" anyone el

Have deleted temp video, configured anti spam and firewall, and one specific video keeps giving me an error. Just tried downloading a previous episode of the show and it worked just fine. Always sunny in philly "Charlie rules the world" anyone else??

Have deleted temp video, configured anti spam and firewall, and one specific video keeps giving me an error. Just tried downloading a previous episode of the show and it worked just fine. Always sunny in philly "Charlie rules the world" anyone else??

How to configure Anti Malware for cloud Services

Is there a way to enable Anti-malware monitoring of cloud service. With the latest release for enabling cloud service, should we still need to have power shell has start up for cloud Services and Power-shell will invoke XML template of anti malware.
I could not be proper documentation of how to enable from Cloud Services solution perspective
Here are the Some of the questions:
Should i still need to have Power shell has startup and configure it for CSDEF file
Where should i place xml template in cloud project, in the power shell, we need to give location of xml file, should xml file and power shell script should be @ same level i.e in the same directory
If we enable Monitoring of Anti malware services for cloud services, we need to give storage account, is there a way where storage account pickup dynamically based on envrionment we are deploying. End of the day,I'm looking for automated way of setting
Monitoring in Production and UAT envrionments
Mahender

hi Mahender,
Thanks for your posting!
For this issue, you could refer to this document and tutorials (Microsoft Antimalware Whitepaper ). And you need use the Azure Powershell (http://msdn.microsoft.com/en-us/library/azure/dn771718.aspx).
Regards,
Will
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

How to migrate Exchange HUB transport 2007 server with Exchange Hub transport 2010.

Hi,
How to migrate hub transport 2007 server with Exchange 2010 hub transport server.
Regards
Anil

Hi Anil
You do not do an in-place upgrade of Exchange - you build new Exchange 2010 Hub Transport Servers, you can utilize existing hardware by uninstalling and installing Exchange 2010 - but you must have Hub Transport Servers that match the Exchange version in
place for all Mailbox Servers that have the same Exchange version.
Essentially there must be Exchange 2007 Hub Transport servers in place whilst there are Exchange 2007 Mailbox servers.
Read "Upgrading from Exchange 2007 Transport -
http://technet.microsoft.com/en-us/library/dd346708%28v=exchg.141%29.aspx"
Exchange 2010 will synchronise certain configuration like Transport Rules and journaling when installing the first Exchange 2010 Hub Transport server, but from then on you must ensure synchronisation yourself.
Send Connectors and Recieve Connectors will need manual configuration.
Oliver
Oliver Moazzezi | Exchange MVP, MCSA:M, MCITP:Exchange 2010,Exchange 2013, BA (Hons) Anim | http://www.exchange2010.com | http://www.cobweb.com | http://twitter.com/OliverMoazzezi

How to Configure Transport MAnagement system in CHARM

Hi
How to Configure Transport MAnagement system in CHARM? Here our requirement is when ever a change request approved in the background Transport request should be created automatically. We have configured all the Transport Routes in our lanscape.
Can any one tell me the detailed process? If you have any Configuration document please share it to me
Points will awarded for helpful answer
Thanks
Bhaskar

In a two system landscape is it necessary to make development the domain controller always?
No such compulsion as such exist(correct me if wrong),however why you want to make production your domain controller?
This is not recommended.
Regards,
Ashutosh

How to configure the transports

How to configure the transports for all the 3 systems including development ,quality and Productions systems, can any one tell following steps for configure the transport

hello sir,
I am not speaking about portal, ?
Where I want configure the transports for all the 3 systems including development quality and Productions systems in SAP 4.7EE ,
Can you tell following steps for configure the transport in 4.7EE

How to configure proxy services to use the file transport?

Hi,
I have configured a proxy service to poll for files in the specified folder. And it is configured to use the file transport.
At runtime, I'm getting the follwing exception -
<Apr 27, 2012 4:08:28 PM GMT+05:30> <Error> <WliSbTransports> <BEA-381602> <Error encountered while polling the resource for the service endpoint ProxyService$ServiceTypes_SB$BinaryService: javax.naming.NameNotFoundException: While trying to lookup 'wlsb.internal.transport.task.queue.file' didn't find subcontext 'wlsb'. Resolved ''; remaining name 'wlsb/internal/transport/task/queue/file'
javax.naming.NameNotFoundException: While trying to lookup 'wlsb.internal.transport.task.queue.file' didn't find subcontext 'wlsb'. Resolved ''; remaining name 'wlsb/internal/transport/task/queue/file'
     at weblogic.jndi.internal.BasicNamingNode.newNameNotFoundException(BasicNamingNode.java:1139)
     at weblogic.jndi.internal.BasicNamingNode.lookupHere(BasicNamingNode.java:247)
     at weblogic.jndi.internal.ServerNamingNode.lookupHere(ServerNamingNode.java:182)
     at weblogic.jndi.internal.BasicNamingNode.lookup(BasicNamingNode.java:206)
     at weblogic.jndi.internal.WLEventContextImpl.lookup(WLEventContextImpl.java:254)
     Truncated. see log file for complete stacktrace
Request help to resolve this.
Thanks in advance.
Regards
Shyam.V

Only the business service would rely on the JMS queues, which in turn would trigger an MDB. I have tested the business service and it works fine.
The problem is only with the polling part of the proxy service.
Regards
Shyam.V

Configuring Internet email, Hub transport, Client access (POP/IMAP) in Exchange 2010

Hi,
I was trying to configure Exchange Server 2010 for sending email to outside of the domain. For example I want to
send email from Exchange to Gmail. More over I also like to know how to enable Client Access
POP and IMAP in exchange server 2010. I already registered a
domain in Godaddy. How to configure Godaddy domain for enabling Exchange internet email configuration.
My atmosphere
Windows Server 2012
Exchange Server 2010 SP3
Domain host Godaddy
Any help highly appreciated. Thanks

The questions you have covers the full Exchange configuration!
To send an email outside, you need to create a send connector in Exchange 2010
http://technet.microsoft.com/en-gb/library/aa997285(v=exchg.141).aspx
You need to sort out your certificate and Exchange urls before enabling IMAP and POP. Both pop and imap services are disabled by default. You can go to services snapin and start the services by setting them from disabled to automatic.

Exchange 2010. Unable to access block list IP's in Hub Transport Service.

Just started today as I was getting ready to add an IP address to the IPBlock list. Box pops up that says 'failed to enable key constraints. One or more rows contain values violating non-null, unique or foreign-key constraints.' The only
thing I have seen mentioned running the Get-IPBlockListEntry command because there was a duplicate IP address in the list. When I ran the command, there were 600+ entries, but I can only read the last 350 of them. There are no duplicates however
in the entries I can see.
My questions are:
is there a hard limit to how many ip addresses can be added into the block IP list box?
Is there a command that would search for duplicate addresses, and if not, is there another way to take care of the issue besides uninstalling and reinstalling the exchange anti spam agent?
How do I get to see the first 250 entries in the results from the exchange management shell?
Thanks for your help!

Hi,
Please refer to the following steps to reinstall anti spam agent:
1. Open EMS, type:
cd "c:\program files\Microsoft\exchange server\v14\scripts"
./uninstall-antispamagentss.ps1
2. Restart the Exchange transport service.
3. Go back to EMS, type:
./install-antispamagent.ps1
4. Restart the Exchange transport service.
If the problem still happens, please restart Exchange hub server
Thanks.
Niko Cheng
TechNet Community Support

Anti malware / anti spam / virus protection

Greetings,
With the introduce of Exchange Server 2013 along with its architecture, Microsoft has moved Transport services / roles to Mailbox Server Role. well, when it comes to anti malware / anti spam and viruses , Microsoft recommends deploying them on Mailbox Server
role, while on CAS, not necessarily be deployed as long as messages are not inspected on CAS Servers.
While some articles say the opposite, and mention configuration of Anti malware ,etc.. on CAS Servers.
What is the best practice for deploying anti malware / spam / virus Software on CAS, and what is the best recommended software for messaging and OS level protection, say Symantec for example.
Thanking you
Jamil

Hi,
Based on my knowledge, in Exchange 2013, the CAS server acts as a stateless proxy for all inbound and outbound external SMTP traffic, it does not inspect message content and does not queue any messages locally. Moreover, as you know, in Exchange 2013,
the Transport service, which runs on all Mailbox servers, is almost identical to the Hub Transport server role in previous versions of Exchange.
Thus, anti-spam agents in Exchange 2013 run on Mailbox servers. And here is a reference about enabling Anti-Spam on Mailbox Servers:
http://technet.microsoft.com/en-us/library/bb201691(v=exchg.150).aspx
Thanks,
Angela Shi
TechNet Community Support

Anti spam filter Mail Issue

No mail arrived to 10.6.6 Mail Server after enabling "zen.spamhaus.org" spam filter. I can send to any, but receive only from local domain. And after disabling the filter, I can receive smoothly from all domain. My server is not blacklisted and it's firewall working correctly.
Postcon output:
mailsrv:~ admin$ postconf -n
biff = no
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debugpeerlevel = 2
enableserveroptions = yes
header_checks = pcre:/etc/postfix/customheaderchecks
html_directory = /usr/share/doc/postfix/html
inet_interfaces = all
mail_owner = _postfix
mailboxsizelimit = 0
mailbox_transport = dovecot
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
mapsrbldomains =
messagesizelimit = 10485760
mydestination = $myhostname, localhost.$mydomain, cmrdi.sci.eg, localhost, $mydomain
mydomain = cmrdi.sci.eg
mydomain_fallback = localhost
myhostname = mailsrv.cmrdi.sci.eg
mynetworks = 127.0.0.0/31,192.168.0.0/16
newaliases_path = /usr/bin/newaliases
queue_directory = /private/var/spool/postfix
readme_directory = /usr/share/doc/postfix
recipient_delimiter = +
relayhost =
sample_directory = /usr/share/doc/postfix/examples
sendmail_path = /usr/sbin/sendmail
setgid_group = _postdrop
smtpsasl_passwordmaps =
smtpdclientrestrictions = permit_mynetworks permitsaslauthenticated permit
smtpdenforcetls = no
smtpdhelorequired = yes
smtpdhelorestrictions = rejectinvalid_helohostname rejectnon_fqdn_helohostname
smtpdpw_server_securityoptions = login,plain,gssapi,cram-md5
smtpdrecipientrestrictions = permitsaslauthenticated permit_mynetworks rejectunauthdestination checkpolicyservice unix:private/policy permit
smtpdsasl_authenable = yes
smtpdtlsCAfile = /etc/certificates/mailsrv.cmrdi.sci.eg.B864F75AEC36A42907A7DBD383E4EA49CF900D97 .chain.pem
smtpdtls_certfile = /etc/certificates/mailsrv.cmrdi.sci.eg.B864F75AEC36A42907A7DBD383E4EA49CF900D97 .cert.pem
smtpdtls_excludeciphers = SSLv2, aNULL, ADH, eNULL
smtpdtls_keyfile = /etc/certificates/mailsrv.cmrdi.sci.eg.B864F75AEC36A42907A7DBD383E4EA49CF900D97 .key.pem
smtpdtlsloglevel = 0
smtpduse_pwserver = yes
smtpdusetls = yes
tlsrandomsource = dev:/dev/urandom
unknownlocal_recipient_rejectcode = 550
virtualaliasdomains = $virtualaliasmaps hash:/etc/postfix/virtual_domains
virtualaliasmaps = hash:/etc/postfix/virtual_users
and the bounce message I receive:
Hi. This is the qmail-send program at mx-relay.netfirms.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.
<[email protected]>:
195.43.3.66 does not like recipient.
Remote host said: 554 5.7.1 Service unavailable; Client host [70.35.17.169] blocked using zen.spamhaus.org
Giving up on 195.43.3.66.
Can you find a solution to this.

Hi Dave,
Following are the detailed steps to uninstall Anti-Spam:
Close the EMC (Exchange Management Console).
Open the PowerShell and navigate using the following path: "Program Files\Microsoft\Exchange Server\Scripts".
Run the "uninstall-AntispamAgents.ps1" script as shown in window (with ./ before the script name) below:
Note: You will be prompt to disable and then uninstall each agent of the Anti-spam system like the Connection filtering, content filter, Sender filtering etc.
Restart the "Microsoft Exchange Transport" service in order to apply configuration changes.
Open the Exchange Management Console, and on the Organization configuration list, select
Hub Transport. You will see that the "Anti-Spam" tab has been removed from the Hub Transport properties.
I suggest double check whether you have re-start the Transport service.
More details in the following link:
http://www.petri.com/install-anti-spam-exchange-2007.htm
Thanks

Exchange 2010 Hub Transport

Hi Spiceheads, I thought that with Exchange 2010 mailboxes will always use the local hub transport on that server first but alas I was wrong. We need to migrate an exchange 2010 box to virtual hardware, I setup and configured a new server with the old one still live, as soon as I installed the HT role on the new server mail immediately started flowing out of it first even though every mailbox and DB was still on the old server, of course this ended up causing our mail to get flagged as spam as the spf records didn't match, thankfully this lasted all of 3 minutes while I uninstalled the role from the new server, My question is - is there a way to add the HT role but still have mail flow out of the old HT server vs the new one?
I want to add the role so I can configure all the options first, including some third party software we have...

Hi allAfter a rather heated conversation with our MSP I come to you for guidance.We've recently acquired another business and need to add two new sites plus a butt hosted server to our network. The current layout is as follows (forgive my terrible diagram):Top is our business, bottom is the one we've purchase, red indicates how the VPNs are structured. We have extensive on-premise infrastructure at the Main Office (top left) so we are planning to retire my butt hosting once our systems have been merged but in the meantime we need to be able to access their system and vice versa so I am hoping for the following:In summaryNew link from my butt hosting to the Main OfficeNew link from the alt-main office to Main officeNew link from the new "other site" to Main OfficeNow, our VPNs are controlled by our MSP, after a two week delay waiting...

Exchange 2008 w/o Edge or Hub transport servers

We are moving to Exchange 07 for somewhere between 5-10K users. I've already talked management into using IronPort instead of MS Edge Transport servers. Would anyone who is currently doing this like to comment on how it is working?
More importantly, it seems to me that IronPort can also do the job of the Hub Transport servers. However, I've been told that Exchange 07 cannot run without them. We are currently using LDAP accept and LDAP routing on IronPort (with AD). Can't that take the place of the Hub servers for Exchange?

We are moving to Exchange 07 for somewhere between 5-10K users. I've already talked management into using IronPort instead of MS Edge Transport servers. Would anyone who is currently doing this like to comment on how it is working?
More importantly, it seems to me that IronPort can also do the job of the Hub Transport servers. However, I've been told that Exchange 07 cannot run without them. We are currently using LDAP accept and LDAP routing on IronPort (with AD). Can't that take the place of the Hub servers for Exchange?
I have been looking long time similar solution. If You have more information, please let me know. IronPort and Microsoft support didn't know is this possible.
We are using Exchange 2007 as internal mail server and Exchange
2007 uses for outgoing (public internet) traffic IronPort cluster as mail (anti spam/anti
virus) gateway, so for example if some our [email protected] sends email to
[email protected], the message goes true external mail gateway.
But when AD/MS domain and Outlook users sending messages between themselves, like
[email protected] > [email protected], the messages does not goes true external
mail gateway right now.
This seems to be Hub Transport Server default behavior.
But as in IronPort we are using a a lot different content filters to remove headers, add
headers, drop specific attachment, look into archives encrypt and decrypt, notify,
quarantine, message tracking etc, so I'd like to route every single message true IronPort
but can't find any way to do it.
As far I know Hub Transport Servers can run specific software, like Forefront etc which
intercept the local traffic.
So So basically IronPort should act as external security appliance for Hub Transport Servers.

Is it possible to remove 2010 Hub Transport entirely in an Exchange 2013 environment?

I'm using Exchange 2010 Edge Transport in our organization that I've recently upgraded to Exchange 2013. I like Edge Transport - along with our spam filter it is an effective and simple way to send and receive external e-mail - and I don't want
to get rid of it. But it seems like it needs a 2010 Hub Transport server to interact with.
Right now the only other Exchange 2010 Server I have left running in the organization is the one Hub Transport server that interacts with the Edge Server. Is there a way to undeploy this server too and connect the Edge Server directly to one of the
2013 Mailbox Servers? Or will this need to stay as part of the organization as a pair with Edge Transport?
I noticed mail flow was running just fine while the Hub Transport server was turned off. So it seems like it's possible. But I want to be able to undeploy it safely without hurting mail flow. Are there any links or white papers that show
how best do do this?
----------- Ron E Biggs Chief Tech Officer Entertainment Studios

Before you remove your HUB servers, make sure you re-subscribe the Edge server using the below steps:
On Edge Server:
New-EdgeSubscription -FileName "C:\EdgeSubscription.xml"
copy the file to one of the mailbox servers, and run:
New-EdgeSubscription -FileData ([byte[]]$(Get-Content -Path "C:\EdgeSubscription.xml " -Encoding Byte -ReadCount 0)) -Site
"ADSITENAME"
once completed, most of the tasks to manage/test your Edge sync will be via PowerShell, please see the below link for more details:
http://technet.microsoft.com/en-us/library/aa996865(v=exchg.150).aspx
Mohammad Saeed | MCSE 2003 | MCTS: Lync, OCS, Exchange This posting is provided "AS IS" with no warranties, and confers no rights

How to configure users for internal mail routing only

Hi Guys!
I have a scenario here that i have three (3) group of users, one group is able to have an inbound and outbound mail, meaning they can send and recieved emails from internal and external.The second group of users should have inbound mail(local mail) only (cannot send and recieved mails from internet), and the third (3) user is they can recieved an outbound mail but they are not allowed to send mail directly to the client,(Ex. [email protected],[email protected],[email protected]) instead they will use the [email protected] as the reply to the client. Please let me know how to configure group user 2 and 3.
Thank you.
regards,
LRMCP

Hi LRMCP,
Procedure is perfect which is given by Benoit, just elaborating steps.
Prevent form Sending Mails:
Create a transport rule on Hub Transport Server:
Organization Configuration -> Hub Transport -> Transport Rules -> New Transport Rule -> Give Name “Group2 - No Internet Mail”
Conditions: select "From a member of a distribution list" & select group "Group2"
Select another condition "Sent to users inside or outside the organization" & Select Outside.
Actions: select "send bounce message to sender with enhanced status code" & write your custom message like “You are not authorized to send mails to internet”
Prevent from Receiving Mails:
New User: You can select “require that senders are authenticated” while creating new users which will stop receiving mails from internet.
User -> properties -> Mail Flow Settings -> Message Delivery Restrictions -> Properties -> set Sender Authentication.
For Existing Users:
You have already a group named "Group2" so set sender authentication for all members with this single command.
Get-DistributionGroup "Group2" | Set-Mailbox -RequireSenderAuthenticationEnabled $true
Same procedure mentioned for group2 can be followed for Group3 to prevent from sending mails.
Amit Tank || MVP - Exchange || MCITP - Exchange 2007 || http://ExchangeShare.WordPress.com

How to configure anti-spam in hub transport

Similar Messages

Maybe you are looking for