Exchange & Outlook UPDATE, Exchange Edition--Going Live with Exchange 2007, Part 2--November 2, 2006

-------| Exchange & Outlook UPDATE |-------

*Commentary: Going Live with Exchange 2007, Part 2
*Exchanging Ideas: The Exchange Intelligent Message Filter
*New and Improved: Manage Access Rights to Mailboxes and Public Folders



Demo: True Exchange Integration with Esker Fax

Ontrack(R) PowerControls Software: The Ultimate Power Tool for Exchange Administrators!

Email Is Down: Now You're Out of Compliance!


Sponsor: Esker

Demo: True Exchange integration with Esker Fax
If your fax server doesn't communicate directly with Exchange, you're missing out on functionality that can make your job easier. Esker Fax(TM) actually integrates within Exchange for direct communication between fax and mail servers. This level of integration provides advantages that are simply not available with other fax servers. Esker Fax offers single-point administration within Active Directory for easy user management, centralized deployment of enterprise-wide desktop fax in one simple step, installation on any server running Exchange Server Manager, and immediate feedback on individual fax processing and sending status. Fax on Demand service provides a secure backup option for failover and overflow, and helps to reduce fax infrastructure costs. Click to request a recorded demonstration of Esker Fax.


***COMMENTARY: Going Live with Exchange 2007, Part 2
by Paul Robichaux, Exchange Editor, [email protected]

Last week, I started writing about my experience moving my (admittedly small) production Exchange environment to Exchange Server 2007 ("Going Live with Exchange 2007, Part 1," October 26, 2006,, InstantDoc ID 94029). I mentioned that I still had work to do on antispam protection. As shipped, Exchange 2007 does a better job blocking spam to my network than a basic Exchange 2003 installation with Microsoft Exchange Intelligent Message Filter, but it doesn't do as well as Vamsoft's ORF Enterprise Edition.

Shortly after submitting last week's column, I added some IP blacklist providers to my Exchange 2007 configuration. You might recall that the message protection and hygiene features in Exchange 2007 are implemented as a set of agents that run either on the Hub Transport or Edge Transport server. You use the Anti-spam tab of the server Properties page to adjust the properties used for the IP Block List Providers object; you can also adjust other properties, such as the settings used for sender and recipient filtering and for Sender ID.

I added two DNS blacklists: AbuseAT ( and Spamhaus ( There are many other popular services out there—why did I pick these two?

  • I chose AbuseAT because its Composite Blocking List records only hosts that have attempted to send messages in a way that indicates the host is infected or compromised.
  • I chose Spamhaus because it's a large, well-known service that combines two separate lists (SBL is a list of spammers; XBL is a list of compromised IP addresses from which viruses, worm traffic, or spam originates).

There are many other blacklists, some much more aggressive than others. For example, the Spam and Open-Relay Blocking System (SORBS) list includes large ranges of addresses that belong to dial-up ISPs, which shouldn't generally be sending SMTP mail. But it also includes large blocks of addresses assigned to cable-modem and DSL providers. Even though I have a business cable-modem account, if my local provider's IP address were to show up in SORBS, I'd have a hard time exchanging mail with the rest of the world. In my opinion, SORBS is a little too quick to block addresses, which is why I don't use this blacklist.

Choosing a blacklist is tricky; your best bet is to start with one or two list providers and see whether your spam level drops. I saw a dramatic decrease in the amount of spam reaching my servers after I added the AbuseAT and Spamhaus lists. I've gone from getting 15–20 spam messages per account per day to one or two, and I haven't found any false positives generated by the Realtime Blackhole Lists (RBLs). Your own mileage may vary, which is why it's important to test the RBLs you choose to ensure that they don't drop legitimate messages.

Next week, I'll be writing about the fall Microsoft Exchange Connections show—look for a report on what's new and cool on the show floor, as well as highlights of the keynotes and other presentations. If you're going to be in Las Vegas for the show, look for me Wednesday morning in session or throughout the show in the exhibit area.


Sponsor: Ontrack Data Recovery

Ontrack(R) PowerControls Software: The Ultimate Power Tool for Exchange Administrators!

Recover: Find deleted and archived mailbox items directly from an un-mounted EDB or PST file without performing time-consuming single mailbox ("brick-level") backups.

Restore: Use any previous full backup to restore mailboxes, messages, attachments, and more directly to your production Exchange server or any PST file.

Research: Set precise search criteria and run detailed queries across multiple data sources, selecting any combination of mailboxes or folders you wish to search.

Relax: With PowerControls, the bottom line is that you will save precious time and money. View a free demo tour here:



Focus: The Exchange Intelligent Message Filter

Get smart about stopping spam
Exchange 2003 wises up when it comes to stopping spam. Find out how the Microsoft Exchange Intelligent Message Filter (IMF) can help your antispam efforts.

Have a question? Got answers? Join your peers in the Exchange discussion forums:
Current Threads:
ActiveSync error: 85010004
Exchange SP2 Mobility Features
POP3 Not Sending *Sometimes*

The voting has ended in the Windows IT Pro Exchange & Outlook nonscientific Instant Poll for the question "What are your Exchange plans for 2007?" Here are the results from the 52 votes:
- 50% Stay on Exchange 2003 (or earlier) as long as we can
- 17% Prepare to migrate to Exchange 2007
- 17% Migrate to Exchange 2007 by Q2 2007
- 15% Migrate to Exchange 2007 by Q4 2007

Tell us what you think in this month's Instant Poll:
"Which topic will be most important to you in 2007?"
a. Exchange security
b. Exchange migration
c. Exchange backup and recovery/disaster recovery
d. Mobile/remote client support
e. Exchange 2007

~~~~ Hot Spot: ~~~~

Email Is Down: Now You're Out of Compliance!
When your email systems go down, do your employees stop communicating? Of course not—they find alternate methods—which may not be compliant with your messaging regulations. Download this free Executive Guide to discover the impact of email outages on compliance and provides methods for establishing continuity in your corporate messaging environment.


by Blake Eno, [email protected]

Manage Access Rights to Mailboxes and Public Folders
C2C Systems released Access Security Manager, which audits and manages email access rights to prevent illegitimate or fraudulent access to mailboxes or public folders within your Exchange Server system. The application compiles all the information about mailbox and mail folder permissions and access rights from multiple Exchange Servers and then lets you modify individual or group settings. Access Security Manager detects users who may gain access to the mailboxes of others and lets you update users' permissions in line with approved security policy and practices. The software alerts you when a zombie user is found—a user that is deleted from the mail system, but still has legacy permissions in the email system. Access Security Manager can be run from within the Microsoft Management Console (MMC). For more information, contact C2C Systems at 413-739-8575.

Wanted: your reviews of products you've tested and used in production. Share your experiences and ratings of products to "[email protected]" and get a Best Buy gift certificate.



These Windows-related events, papers, and resources will help you keep your knowledge and skills up to date and help you deploy, secure, and maintain the latest Exchange- and Windows-related technologies. For more Exchange related resources, visit

Can disaster recovery planning create real value for your business beyond mere survival? Justify your investments in DR planning, and get real answers to your questions about how DR planning and implementation affect the financial performance of your organization. Make cost-effective decisions to positively impact your bottom line! Live event: Tuesday, November 14

How do you manage security vulnerabilities? If you depend on vulnerability assessments to determine the state of your IT security systems, you won't want to miss this Web seminar. Special research from Gartner indicates that deeper penetration is needed to augment your existing vulnerability management processes. Learn more today!

Learn all you need to know about code-signing technology, including the goals and benefits of code signing, how it works, and the underlying cryptographic and security concepts and building blocks. Download this complete eBook today—free!

Does your company have $500,000 to spend on one email discovery request? Join us for this free Web seminar to learn how you can implement an email archiving solution to optimize email management and proactively take control of e-discovery—and save the IT search party for when you really need it! On-demand Web Seminar

Total Cost of Ownership—TCO. It's every executive's favorite buzzword, but what does it really mean and how does it affect you? In this podcast, Ben Smith explains how your organization can use virtualization technology to measurably improve the TCO for servers and clients.



Is your email easily accessible, yet secure, in the event of an e-discovery request? With the phenomenal growth in email volume and the high cost of failing to comply with a discovery request, you can't afford to lose any email. Download this free white paper and implement a strong email retention and management system today!



Uncover Essential Windows Knowledge Through Excavator
Try out the ultimate vertical search tool—Windows Excavator. Windows Excavator gives you fast, thorough third-party information while filtering out unwanted content. Visit today!

Your Vote Counts!
Vote for the next "IT Pro of the Month!" Take the time to reward excellence in an IT pro. The first 100 readers to cast a vote will receive a one-year subscription to Windows IT Pro, compliments of Microsoft. Voting takes only a few seconds, so don't miss out. Cast your vote now:

~~~~ Contact Us ~~~~

About the newsletter -- [email protected]
About technical questions --
About product news -- [email protected]
About your subscription -- [email protected]
About sponsoring UPDATE -- [email protected]


This email newsletter is brought to you by Exchange & Outlook Administrator, the leading publication for IT professionals managing, securing, optimizing, and migrating Exchange and Outlook. Subscribe today!

View the Windows IT Pro Privacy policy at

Windows IT Pro a division of Penton Media Inc.
221 East 29th Street, Loveland, CO 80538,
Attention: Customer Service Department

Copyright 2006, Penton Media, Inc. All Rights Reserved.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.