Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Do you know a good (and free, if possible) Microsoft Exchange 2003 spam filter?

share

locked by Tom O'Connor Jun 12 '13 at 9:48

This post has been locked due to the high amount of off-topic comments generated. For extended discussions, please use chat.

closed as not constructive by Chris S Feb 4 '13 at 13:48

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

    
Exchange 2003 or 2007? –  Sam Apr 30 '09 at 15:12
    
Sorry, Exchange 2003 –  Olivier Payen Apr 30 '09 at 15:17
    
I'm curious if you tried Safentrix, and if so, how that worked out for you. –  Justin Scott Jun 11 '09 at 19:41

11 Answers 11

up vote 5 down vote accepted

If you don't mind an outsourced service, you may be able to use Safentrix as a gated filtering solution. They claim free service that scales up to 20,000 users. I have not tried this service, so your mileage my vary.

There are a slew of other paid gating services that you can use to filter your incoming mail such as MX Logic (have heard good things about them).

If you want an in-house solution, you could look at a hardware device such as a Barracuda, or a software solutions such as ModusGate.

share
    
Well, safentrix is defintely going on my eval list! –  Christopher Edwards May 5 '09 at 20:48

We find that properly configured DNS/Realtime Black List (DNSBL/RBL) works wonders, part of the Intelligent Message Filter in Exchange 2003. We use:

See this article for how to configure it in Exchange 2003.

share
    
Blocking mail completely due to the sender IP appearing on a blacklist is a very bad idea; you will definitely block some legitimate senders. –  MarkR Jun 11 '09 at 20:59
1  
Aren't false positives a risk with any anti-spam system? –  Duncan Smart Jun 14 '09 at 18:42
    
False positives are always a risk, but most blacklists have a reputation of being risky. The ones you mention are better than average, but for example I wouldn't outright block dynamic IP's. A layered approach is much safer and can more easily adapt to changing patterns. –  Martijn Heemels Jul 2 '10 at 8:20

I don't know of many free products, although i have seen an implementation of spam assassin for exchange 2003. Most products are paid for ones, some to of the popular ones being:

share
    
We use GFI in our place. Has worked extremely well over the past three years however it is becoming increasing annoying. The new Razor plugin is a black box as far as GFI is concerned so if it decides something is spam, there is nothing you can do short of disabling the plugin. –  Ryaner Jun 23 '09 at 13:12

There's an article which provides a overview of some solutions to that issue.

share
    
Good article, but all mentioned products are commercial. –  Martijn Heemels Jul 2 '10 at 8:31

I've had a lot of trouble with GFI and spam assassin. Both are good products but lack any decent detection rates. And depending on your setup (especially with multiple servers) you'll run into a lot of config problems. (Though GFI support is really on the ball - I was able to report bugs and get a workaround and then working fix within a week.)

What I ended up doing was going with the now google owned Postini and I haven't looked back. It "just works" (you set your MX records to them and reject email not from their servers in your firewall) and is very powerful and you can get it as low as $1.50 a mailbox.

You get a quarantine email at the end of the day with a list of subjects it picked up and you can just click deliver next the email you want. It also filters out "blatant spam" that doesn't even hit your quarantine. My company used to get sever hundred spam messages a day per mail box (about 40 boxes) and where GFI would catch about %75 of them, postini catches much closer to %99.

Dealing with spam used to take up a lot of my time, now Its rare when I get complaints about it in a week.

share

when we were still using Exchange, I had a small box running Exim and DSPAM in front of Exchange which worked incredibly well. About one SPAM mail per month still got through - without a single false positive.

share
    
What did you do with the spam? How did you let the recipients retrieve false-positives or mark spam? –  Martijn Heemels Dec 21 '11 at 15:16

You could consider putting Hermes, a transparent SMTP proxy in front of Exchange. It is open source.

It filters out the blatant spam at the SMTP level, so the crap is not even coming into your site.

share

http://www.thefreespamfilter.com

Free Exchange server-side spam filter appliance built on VMWare, with install videos.

share
    
This is an excellent product. –  Fergus Sep 21 '12 at 19:20

SpamAssassin is quite the powerful product and works extremely well when configured correctly. That being said, to get a working implementation, you'll need to know a little bit about at least one distirbution of Linux and working with Config files. SpamAssassin comes pre-packaged with 20 configured DNSRBL servers and works for about 33% of my spam. The rest gets caught and/or killed by combining SpamAssassin Bayesian filtering, DCC, Pyzor and Razor2. Rather than using a quarantine box, I find it easier, in my small orgainziation, to simply tag the messages as SPAM and have them deliver to a separate folder using a rule on the mailbox server.

While there are a number of ways to configure SpamAssassin, it's most highly effective when glued together with ClamAV using Amavisd.

A good tutorial on how to do this is available at HowToForge.net here - http://www.howtoforge.com/virtual_postfix_mysql_quota_courier.

You can copy and paste most of it, but read through it carefully because there are a few server specific changes you will need to make.

share

Although it isn't free, ORF from www.vamsoft.com is licensed per server. So in my environment of 300 mailboxes, it is much more affordable to pay $239 to protect everyone as opposed to the big guys who usually want $10-$30 per mailbox.

As far as functionality, it works really well for us. They have a best practices guide on setting it up, I set it up to use 3 of the most popular DNSBL, 2 of the most popular URI based filtering, a couple other minor tweaks, and it catches most of the spam sent to us.

I'm sure Postini and some of the other big guys have better ratios, but I'm very happy with the price versus the results.

share

I have only had excelllent results with SPAMfighter's solution for Exchange spam. GFI was also good but a little on the expensive side for 25 mailboxes.

share

protected by RobM Feb 4 '13 at 12:44

Thank you for your interest in this question. Because it has attracted low-quality answers, posting an answer now requires 10 reputation on this site.

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.