#EXCHANGE 2010 SPAM FILTER HOW TO#

I am referring to 'when a recipient's address contains specific words' and other qualifiers like that.

#EXCHANGE 2010 SPAM FILTER HOW TO#

I have seen different articles about how to use the options in transport rules, and how those options need to be coded in order to work, but I haven't seen them work consistently, and I don't know which one to use in order to accomplish specific filtering tasks. I see transport rules in the EMC, but I don't understand where they fit in relative to the antispam features, as in are they processed before or after the antispam rules ? The version on my Exchange server is, which does not show those counters. As an example, it is presented in this article. There is a version of perfmon which displays counters for the number of emails assigned SCLs from 1 to 9, but I can't see how to configure it to display that report. There are articles I have read about exposing the SCL and various other fields, and displaying them in Outlook 2007, and I have added the columns, but the fields never populate. Looking at the headers, I see 'Content Filter agent quarantined this message', which implies that a score is being assigned and used, but I can't see it. Checking the agent logs, I can see that emails which arrive in the spam inbox have a value of 'SenderIDStatus pass' in the Diagnostics field, but there is nothing in the log entry to indicate why they end up there. None of the emails appear to have SCL values or stamps in the headers, although something must be putting them in the spam inbox. Because spammers might have cached the IP address of your mail server, it would be a good idea to only allow email from SpamHero IPs to force all email through our filter. I have Azure AD Sync in place and went through with the office 365 hybrid configuration wizard. Microsoft Exchange allows you to restrict the IPs that are allowed to deliver email to it.

Im running into an issue because currently our MX record points to the in house Barracuda Spam filter then passed the mail onto the Exchange Server. Why is that, and how can I get them to be consistent ? Im in the process of going from an on-premise Exchange 2010 server to Office 365 hybrid configuration.

If I go to the EMS and issue a get-contentfilterconfig, I see different email addresses in the bypassedsenders property, but not the one I see in the ECM, and the ones I see here are not listed there (in the ECM). Opening the ECM, selecting properties of Content Filtering and then the exceptions tab, I see an email address that I entered. It is a hub role server, with only a firewall in front of it. I have an Exchange 2010 server which is proving to be a challenge where configuring antispam is concerned.

Exchange 2010 spam filter