Hi!

I recently installed a combined Transport/Mailbox server, and installed the antispam engine.

I've tried to make the ContentFilterConfig tight, and added Phrases. But even though it says Enabled $True, especially my boss his mailbox is spammed relentlessly. Tried activating the mailbox junkmail setting (Set-Mailbox <MailboxIdentity> -AntispamBypassEnabled $true...), but that didn't make any difference.

Some messages are entering the Junkmail folder, some are sent to the Spam mailbox, but the majority of the most obvious spam is still entering his mailbox. So I disabled the Junk setting on the mailbox and tried using ContentFilterPhrases, using the spam text of the mails still present in the mailbox. I rebooted the server just to make sure it would process any changes.

Nevertheless, very explicit spam with exactly the same text as I entered in the Phrases section still comes in.

Some results of the ContentFilterConfig:

Name                                  : ContentFilterConfig
RejectionResponse                     : Message rejected as spam by Content Filtering.
OutlookEmailPostmarkValidationEnabled : True
BypassedRecipients                    : {}
QuarantineMailbox                     : spam@domain.local
SCLRejectThreshold                    : 6
SCLRejectEnabled                      : True
SCLDeleteThreshold                    : 8
SCLDeleteEnabled                      : True
SCLQuarantineThreshold                : 2
SCLQuarantineEnabled                  : True

Enabled                               : True
ExternalMailEnabled                   : True
InternalMailEnabled                   : False

Or should I best install an Edge server?

Thanks

Hi ,

Edge server is the best option and on that just install anyone of the third party transport agent to block the multi media files ,attachments and executable files or else you can have the third party transport agents installed on the mailbox servers.

What is the difference of installing Anti spam in mailbox and edge server ?

http://exchangequery.com/2014/03/21/comparing-the-differences-between-antispam-agents-from-exchange-2010-to-exchange-2013/

Hi,

Have you checked the suggestion S.Nithyanandham provided?

Is there any update with your issue?

Best regards,

If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

Hi Amy,

I found out that a previously setup Exchange 2013 server was causing the traffic to still be handled by that old server, even though I moved all the hidden arbitrary and health mailboxes to the new server, and pointed the mx at the new server. The header of the spam revealed that the old server was still handling it, which meant that that mail was apparently considered 'internal'. Since I did not set an internal content filter, spam was free to come in, regardless of the strictness of the content filter and phrases for external mail. So I removed the old/previous server, and now the spam/content filtering is working as expected. Thanks for your help guys!