Has anyone else been getting hit with more than normal spam the past 2 weeks? I have checked all my FIPS updates are running as expected, but it's just non-stop.

I also wanted to create a rule to block certain top level domains like .ru or .ga  or .eu

Does anyone have any suggestions on how to do that? I haven't found a way to do a wildcard

thanks!

Has anyone else been getting hit with more than normal spam the past 2 weeks? I have checked all my FIPS updates are running as expected, but it's just non-stop.

I also wanted to create a rule to block certain top level domains like .ru or .ga  or .eu

Does anyone have any suggestions on how to do that? I haven't found a way to do a wildcard

thanks!

What are using for anti-spam? The anti-spam protection for on-prem Exch 2013, is pretty basic. FIPFS is part of  the anti-malware engine, not anti-spam.

I ran the install-Antispamagents.ps1 script

Then I "tightened" the thresholds for SCL ratings and added a bunch of Blacklist providers like Spamhaus and spamcop.

Along with some transport rules to stamp "suspected" spam with high SCL values, I have been doing ok, But it feels like something changed because the past 2 weeks where normally I would have 4-5 emails in my junk folder, now I have 40 daily and A LOT more that actually hit my inbox with SCL ratings of 1 or 2.

do you have any suggestions?

thanks

Hi,

Please install the Anti-Spam agent and make sure it is enabled in Exchange server:

Get-TransportAgent

Please check whether the Spam message is sent by the same domain or not. Also confirm if there is any changes in Exchange server in past 2 weeks. In Event Viewer, please check if there is any log related. Additionally, we can enable Exchange Online Protection (EOP) or install Edge server in your environment to do best experience for Anti-Spam.

Regards,