Dear all,

What is the best way to stop spam in exchange 2003?:)

There is software used by a lot of companies, made by GFI. They have security software and antispam software.

GFI - Fax server, Exchange anti-virus, anti-spam, network security and monitoring software (http://www.gfi.com/)

To stop spam from being sent out using your domain name, have the administrator for you DNS records set up an SPF record for you.

Here is what our company uses:
Symantec Brightmail AntiSpam: Overview - Symantec Corp. (http://www.symantec.com/enterprise/products/overview.jsp?pcid=1008&pvid=835_1)

To stop spam from being sent out using your domain name, have the administrator for you DNS records set up an SPF record for you.
I currently help out a small non-profit organization for breast cancer that has been having problems with someone using their domain name to send out spam. Their domain and their mail services are handled by godaddy.com. I have an email account setup that is a catch-all account so they don't loose any incoming email. Every so often the office worker who monitors that account will get bombarded with undeliverable spam email that was sent out by someone else. Will this help us get rid of that and how effective will it be? They seem to imply that it's up to the receivers mail server to do the checking... if most don't currently support SPF, what else can we do?

Thanks.

I would set up an SPF record anyway, as in the future, hopefully more administrators will invoke programs that check for SPF. Another thing to look into, though I don't really know much about it, is Microsoft's Sender ID policy. I'm not sure how helpful that would be, but it's worth a look.

The reason I first looked into SPF was because I was receiving about 10 bounce messages a week because of spammers using my domain. Since I set up my SPF record, I haven't received a single one, so it might be more useful than you think. I know hotmail does SPF checking, though I don't think Yahoo does...

Other than that, I think it's mainly up to the receiving mailserver to try to detect what's spam and what isn't, and I don't think there's too much more you can do about it.

SPF: Project Overview (http://www.openspf.org/)