Currently, there 2 or 3 mailboxes being sent out a lot of spam mail to Internet. I tried used Message tracking, and refer to sendlogs but failed to indentify spam mails came from which IP address. It is only show email being sent from mailbox server. We are using Exchange 2007

Hi, It is recommended that to use Forefront TMG 2010 from microsoft. Download evaluation version from here http://www.microsoft.com/downloads/details.aspx?FamilyID=E05AECBC-D0EB-4E0F-A5DB-8F236995BCCD&displaylang=en Regards from www.windowsadmin.info

We have Forefront TMG sit doing nothing. Could you provide me the step by step to configure it. Thank you

Hello, Did you followed Configuring protection from e-mail-based threats: http://technet.microsoft.com/en-us/library/dd441084.aspx Regards from www.windowsadmin.info

Currently our outbound mail were sent to smart host. Should i changed that before able to configure Forefront?

Hi, What did you receive if you use Message Tracking? Can you find the spam by subject? The clientIP field is none? For forefront problem, you should ask a question in Forefront forum: http://social.technet.microsoft.com/Forums/en-US/forefrontexchange/threads By the way, you can also use Netmon or Sniffer to capture the packets. http://www.microsoft.com/downloads/details.aspx?FamilyID=983b941d-06cb-4658-b7f6-3088333d062f&displaylang=en Frank Wang