The State of Montana will be filtering spam with Forefront Online Security for Exchange to provide a better spam filtering product to the State of Montana Exchange users. This page is to provide users with answers to frequently asked questions. This is in initial phase and is being rolled out to small sets of customers at this time.
Q. What is the default notification period of spam quarantine notifications?
A. Unlike Espion which sends out consolidated reports once a day users will receive consolidated notifications that will be sent out every 3 days. If users need to check their spam more frequently then every 3 days users can log into their Quarantine mailbox at anytime.
Q. Can I change the notification interval of when I receive reports from FOSE?
A. At this time there is no way to customize report intervals for individual users other than to turn reports off. So everyone who request reports will receive a report every three days.
Q. The FOSE password does not synchronize with Active Directory. How will users reset their passwords when they forget them?
A. There is an option on the FOSE portal for "Forgot Password?" that allows for user self-service.
Q. If you use Outlook to authorize a safe sender, will FOSE know this and continue to send me this email?
A. The Safe Sender option in Outlook only handles the way Outlook makes decisions about routing messages to the junk E-mail folder. It's not synchronized in any way with the interceptors, nor will it be with FOSE. From the standpoint, nothing about FOSE changes the way Safe Sender works.
Q. Who will manage the permissions to allow users to have access to FOSE Spam Quarantine? Will agency security officers be able to specify who can access move spam to their inbox?
A. By default, users will be able to login to their spam quarantine and manage their own spam messages. Service desk can access the quarantine of user calling in who requires help.
Q. What if I don't want to receive a spam report from FOSE?
A. Spam notification can be turned off for individual accounts. Users can make the change from within the Quarantine service by clicking Options located above the top menu bar. Users can then select the option to receive or not receive the send notifications. Once done click on Save to keep the changes.
Q. If I specify something is "Not Junk" will it continue to come directly to my inbox in the future?
A. When you use the "Not Junk" link, the message will be recovered to your Inbox, and a copy will be submitted to the FOSE Spam Team for analysis. FOSE will make the determination to allow or not allow the mail through.
Q. The Spam filter caught a legitimate piece of e-mail. What do I do?
A. Please send a copy of the message along with full internet headers to FOSE False Positive team at firstname.lastname@example.org.
Q. What do I do with unfiltered Spam messages?
A. Please send a copy of the spam message to our Spam team at email@example.com. One spam message per submission, please. Submitting a group of messages in an attachment is not the best way as much of the original spam message can be lost. Instructions provided below for the specific clients on how to send the e-mail to the Spam team.
Office Outlook 98, 2000, XP, and 2003
Office Outlook 2007
Microsoft Office Outlook Web Access for Exchange Server 2007
Q. How do I get off an email BlackList?
A. If sending email to the State of Montana and you are notified you are on a blacklist for spam from Microsoft the notification will look like the example below.
There was a SMTP communication problem with the recipient's email server. Please contact your system administrator.
NDR Blacklist notification from Microsoft that contain ##.blacklist.zap please follow the instructions below:
86.blacklist.zapThis list is generated with data from the PBL and SBL public black lists which are ran by Spamhaus. In order to be removed from this list you will need to contact Spamhaus and request delisting. Once Spamhaus has removed your IP address from SBL or PBL our information will generally update within one to two hours.Spamhaus web site: http://www.spamhaus.org/
Spamhaus lookup site: http://www.spamhaus.org/lookup.lasso87.blacklist.zapThis list is generated with data from the XBL public black lists which is ran by Spamhaus. In order to be removed from this list you will need to contact Spamhaus and request delisting. Once Spamhaus has removed your IP address from XBL our information will generally update within one to two hours.Spamhaus web site: http://www.spamhaus.org/
Spamhaus lookup site: http://www.spamhaus.org/lookup.lasso
88.blacklist.zap & 85.blacklist.zap
For the fastest removal off of 85.blacklist.zap and 88.blacklist.zap please call 1-866-291-7726. The bounce message will contain the IP address and which blacklist you are on. This information is required for us to process the delisting request. Once received a delisting request will usually be resolved within 24 business hours.
For all other Blacklist NDR’s
You can use online tools to see if you are listed such as the example below:
http://www.mxtoolbox.com/blacklists.aspx In addition to monitoring the blacklists, it is also advisable to monitor Google
Groups (Usenet discussion forums) for the name of your site, limiting your
search to only the news.admin.net-abuse groups, to see if it lists any spam
reports for your domain:
Note: If there is a specific spam report containing your domain and you have
not sent spam, it is possible that the email address has been spoofed. That
means that the email "From" field was forged by a spammer, so it would look
as if it had originated from your site.