[malarie]

Hi all,
We have a BES 4.X Professional connected to our exchange server. We also have Microsoft Antigen for SMTP antispam which doing a great job.

We are facing a problem..
It seems that BES is pushig all our e-mails before the AntiGen had a chance to scan them. So we receive a lot of spam on our 8830. this spam does not reach our outlook mailboxes..

Is this a known issue? Is it possible to my configuration is missing someting?

thanks for reading.

[JSanders]

**moved to the BES Admin corner**

[stuwhite]

Really you want your anti-spam system before your Exchange server. That's what we have so email that hits Exchange (and therefore BES) has already been filtered. I don't know antigen but assuming this is all on one box, can you move antigen to have it running on a server prior to Exchange?

[malarie]

Exchange - AntiGen for SMTP and BES are all on the same server... (windows SBS 2003) I am running BES 4.1.

In the SBS architecture, i read that exchange needs to installed on the SBS.

[DavidAdams]

There is also a registry edit you can do on your BES to delay it's scanning of email to allow SPAM/AV processes to finish with them first.

Will find the link and add it here.


Edit

That was easier to find than I expected:
View Link

[knottyrope]

Or get a Barracuda spam/virus firewall. My users love it.

[stuwhite]

Originally Posted by malarie

Exchange - AntiGen for SMTP and BES are all on the same server... (windows SBS 2003) I am running BES 4.1.

In the SBS architecture, i read that exchange needs to installed on the SBS.

Yeah Exchange does but can you move antigen so it's on a separate box? If not you will need to look at the config options to get the mail delivered from your SMTP server to antigen first. The problem at the moment is that antigen is scanning it as it hits Exchange (I am guessing). It may be that you just can't have antigenand Exchange work any other way in an SBS setup but it would be best to explore this topolgy-change option first IMHO. I know forefront can run on separate boxes before Exchange but I know nothing of anitgen and very little of SBS, sorry.

[stuwhite]

Originally Posted by DavidAdams

There is also a registry edit you can do on your BES to delay it's scanning of email to allow SPAM/AV processes to finish with them first.

Will find the link and add it here.


Edit

That was easier to find than I expected:
View Link

I thought of that but wasn't sure if it would solve the issue in this case. My knowledge of SBS is miniscule though so it's all guesses from me

[stuwhite]

Originally Posted by knottyrope

Or get a Barracuda spam/virus firewall. My users love it.

Couldn't agree more, it's our anti-spam system here but I can't see a small org with SBS who has bought antigen going that way.

[DavidAdams]

Originally Posted by stuwhite

I thought of that but wasn't sure if it would solve the issue in this case. My knowledge of SBS is miniscule though so it's all guesses from me

Mine is probably even smaller, we are a Domino shop and our mail is Spam/AV filtered externally before it is even delivered to us.

Just posted it in case it was of any use.

[stuwhite]

Originally Posted by DavidAdams

Mine is probably even smaller, we are a Domino shop and our mail is Spam/AV filtered externally before it is even delivered to us.

Just posted it in case it was of any use.

Yeah fair enough mate. It probably is worth trying, OP, as you have nothing to lose.

[malarie]

knottyropem, Barracuda is a little bit overkill.. I Only have 8 people running around with BlackBerries

[stuwhite]

Originally Posted by malarie

knottyropem, Barracuda is a little bit overkill.. I Only have 8 people running around with BlackBerries

LOL, they will be _well_ protected then

[malarie]

okay, I have added the ProcessMailDelay Registery key. I set it up to 10 seconds.

I will see in the coming days if the spam is gone and let you know

Thanks a lot to all who helped me. Its really apreciated!!

[dcomiskey]

Originally Posted by knottyrope

Or get a Barracuda spam/virus firewall. My users love it.

Ditto on this. We have a 'cuda anti-spam box that all email is routed through BEFORE it even hits our Exchange box. And I can only imagine it's a helluva lot more effective than any of Microsoft's products. We've had one for nearly 2 years and it's been more than 99.5% effective - and we get hit with a LOT of spam since we're a marketing agency. It's extremely rare that a user forwards me any spam that gets through.

EDIT: Whoops, I just saw the part about 8 users. Perhaps you should just contract out your spam filtering to an ASP?

[malarie]

Originally Posted by dcomiskey

Perhaps you should just contract out your spam filtering to an ASP?

AntiGen for SMTP does a great job so far. Of course i still receive 2 or 3 spam messages a day but thats someting i can deal with