Generating SPAM lists 2

[khinester]

Hello,
I have a user on an Apple Mac, using Outlook, who is reciving a huge ammount of SPAM all from different sources!

Is there a way that I can extract the domain from where these emails come from so that I can paste them to the TurfTable key, as discribed in the Exchange Server 5.5 FAQ: Combating Spam (faq10-3570)

Cheers

 

[joegz]

I get the domains by right mouse clicking on the mail item and select options. In the internet headers field I go down to where it says it is From and get the domain from there.

joegz
"Sometimes you just need to find out what it's not first to figure out what it is."

 

[khinester]

yes i know that, but when a user gets 100's of spam mails, i though it may be a more intuative way to generate this list.

is there an option perhaps in outlook where one can mark a bunch of emails as being spam, then this to automagically update the exchange server?

cheers

 

[jpm121]

There's probably an add-on out there somewhere for Exchange that will support this; you might cross-post to the Exchange forum here at Tek-tips.

Keep in mind that spammers are always a moving target, so in all liklihood by the time you get an IP address marked and listed, the spammer is already booted from that ISP and moved on to another.

There are more efficient and elegant solutions out there, that will save much time.

 

[SpotLizard]

One problem with Spam is that domains/IP addresses of the sender can be spoofed. Blocking a domain may result in genuine e-mail being bounced.

Exchange 2000 will allow you to reject mail from an entire domain (not sure about Ex5.5). You can also configure Exchange to have DNS do a reverse lookup on the senders IP address before accepting mail.

Of course, this has all been fixed in Exchange 2003 It makes use of RBLs to filter junk mail. You might want to try searching Google for RBL or Realtime Black Lists to see if anyone has created a solution for the earlier versions of Exchange.

Personally, I find domain filtering to be problematic. There are some commercial server-side solutions out there that filter by subject. If you have the time and the patience you might want to create some client-side rules that filter spam by subject line.

This guy

http://www.gaznet.au.com/spam/download.htm

has put together a pretty comprehensive list of spammer addresses that you can download and use, though it does require updating on your part.

Hope this helps.

SL