Microsoft Exchange 2007

Anti-Spam on Hub Transport

Setting Hub Transport for Anti-Spam in absence of Edge Transport.

Execute the script, in the script folder i.e. C:\Program Files\Exchange Server\Scripts\install-anitspamagent.ps1 after that you have to restart Transport service then you’ll get Anti-Spam Management tab in console.

Following are the levels of filtering.

1) Connection Filter

2) Sender and Recipient Filter

3) Sender ID Filter

4) Content Filter + Attachment Filter

Connection Filter: First Level of Filtering

IP Allow List: You could provide IP Address, or range

IP Block List: You could provide IP Address, or range

Safe Provider List (White List)

These are the third party agency providing the spam senders IP

Realtime Block List (Black List)

These are the third party agency providing the spam senders IP.

Sender and Recipient Filter

Block email from sender with blank sender information, block email from particular sender or domain, you could take the actions like REJECT, or STAMP the message

Recipient filtering, for block mail from outside to particular email ID inside the domain.

Sender ID Filter

It will query the DNS record of the domain from which mail was received to check whether it is authorized to send mail

Sender Reputation Filtering

If the sender is using open proxy, then most likely it is a spammer.

Content Filtering

Check the message for it being SPAM; you could set specific words for checking in the mail.

0 - for mail is not a spam

9 - Mails is likely to be spam

Depending upon SCL we could take actions like, delete, reject, and quarantine.

Attachment Filtering.

You could block attachment with specific extension.

#################################################################################################################

*5*

Client Access Server (CAS) + POP / IMAP

CAS: This is the Role which is responsible for accepting connections from NON-MAPI Clients

We have two types of connections here

1) Outlook Web Access

2) Outlook Anywhere

In Brief

1) Outlook Web Access

Allows access to mail through browsers.

Management of Outlook web Access.

Go To

Server Configuration => Outlook Web Access => owa properties.

Properties you could set

1) Outlook web Access URL

2) Authentication, Logon Format,

3) Segmentation , you could enable /disable the feature like Calendar, Address List, etc

4) Public computer / Private computer settings ( While logging into the owa user could choose whether the pc is public or personal , based on these, settings could be made so as to enable file access of specific format)

2) Outlook Anywhere:

You could have outlook outside the exchange network, connected via RPC proxy service.

What happens is that the RPC connects to exchange wraps the response in HTTP/HTTPS and sends it to the client.

Enable Outlook Anywhere:

Server Configuration => Actions Pane => Enable Outlook Anywhere

1) set the hostname

2) select Authentication mode.(Basic and NTLM)

Client Configuration: Select Proxy setting and enter the hostname of the Outlook Anywhere set earlier,

select the authentication method and its done.

POP / IMAP

POP and IMAP services are not started by default; you could start it and set it to automatic.

For Exchange 2007 without sp1 we have to configure advance settings through exchange shell, while in sp1 we get graphical interface.

LoginType, AuthenticatedConnectionTimeout, MaxConnections, MaxConnectionFromSingleIP, MaxConnectionsPerUser etc are settings that could be configured

#################################################################################################################

Email Policies, Accepted Domains, Distribution list, and Global Address List

Email PoliciesEmail Policies: Policy defines what the name should be for the user mailbox, i.e. the part before the @ sign. So that users get a particular naming standard.

Also we set email policy based on particular attribute-value

Creating Policy Go To

Organization Configuration => Email Address Policies=> New, it will start a wizard.Accepted Domains

Accepted Domain. We could created new domain for which this sever will take mails.

Three types of Domain

1) Authoritative : Mail is relayed to user in the exchange organization

2) Internal Relay : Mail is relayed to mail server to another Active directory forest

3) External Relay : Mail is relayed to mail server by the edge transport itself

Creating New Accepted Domain:

Go To

Organization Configuration=> Accepted Domains Pane=> Right click to create New Accepted Domain

NOTE : For Hosting Multiple Domain we could choose the domain as to be Authoratative Domain.

Also we could define Email Address Policies for above domain

Distribution List: Mass sending of mail, we could put user’s mailbox, mail contact, and other groups

Exchange 2007 supports the following types of distribution groups:

Exchange 2007 supports the following types of distribution groups:

Mail-enabled universal distribution groups : These are Active Directory distribution group objects that are mail-enabled. They can be used only to distribute messages to a group of recipients.

Mail-enabled universal security groups : These are Active Directory security group objects that are mail-enabled. They can be used to grant access permissions to resources in Active Directory and can also be used to distribute messages.

Mail-enabled non-universal groups : These are Active Directory global or local group objects that are mail-enabled. In Exchange 2007, you can create or mail-enable only universal distribution groups. You may have mail-enabled groups that were migrated from previous versions of Exchange that are not universal groups. These groups can still be managed by using the Exchange Management Console or the Exchange Management Shell.

Dynamic distribution groups : These are distribution groups for which membership is based on specific recipient filters rather than a defined set of recipients. Dynamic distribution groups were called query-based distribution groups in Exchange 2003

Creating Distribution Group:

Go To

Recipient Configuration => Distribution Group=>New Distribution Group=>Wizard Comes up.

We could set Distribution Group for any Group in Active Directory.

Dynamic Distribution Group => You could select recipient based on specific attributes

Global Address List: Includes all the recipient objects in the exchange, which helps

in finding a particular mail contact.

We could create our own address list based on specific department, location etc.

Organization Configuration => Mail Box => Address List

We have one default Global Address List.

Through Actions Pane we could create a new address list or sub address list (i.e. address

list inside other address list) based on specific Attributes.