Announcement

Collapse
No announcement yet.

Intelligent Message Filter

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Intelligent Message Filter

    I have just configured Intelligent Message Filter on exchange 2003 server but spam is still getting to the outlook inbox. Do I have to activate unwanted E-mails on the clients?

  • #2
    Re: Intelligent Message Filter

    What settings have you applied in IMF? It isn't completely fool proof. No antispam solution is.
    Are the clients in cached mode?

    Simon.
    --
    Simon Butler
    Exchange MVP

    Blog: http://blog.sembee.co.uk/
    More Exchange Content: http://exchange.sembee.info/
    Exchange Resources List: http://exbpa.com/
    In the UK? Hire me: http://www.sembee.co.uk/

    Sembee is a registered trademark, used here with permission.

    Comment


    • #3
      Re: Intelligent Message Filter

      Originally posted by hilsoe View Post
      I have just configured Intelligent Message Filter on exchange 2003 server but spam is still getting to the outlook inbox. Do I have to activate unwanted E-mails on the clients?
      Have you made sure that you have applied the setting to the correct SMTP virtual server in ESM?

      The IMF is customisable though. You can modify the spam confidence levels from the IMF tab under message delivery. The only problem with this though is you run the risk of rejecting legitimate email depending on what you set the SCL rating to as its only hueristics based, as well as what "action" you specify as the criteria for messages. So you would then have to go through the tracking logs and "train" the IMF accordingly. No settings need to be applied client side.

      Comment


      • #4
        Re: Intelligent Message Filter

        I startet with SCL at 7 and blocked message: "Archive". Moving messages SCL 4.

        Yes I have applied the sitting on the SMTP server.

        No the clients are NOT in cached mode and that is what I'm not sure if I have to do. And i'm not sure if I have to activate Junk E-mail on the clients.

        Comment


        • #5
          Re: Intelligent Message Filter

          IIRC Junk Mail will not work unless the clients are in cached mode
          Tom Jones
          MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
          PhD, MSc, FIAP, MIITT
          IT Trainer / Consultant
          Ossian Ltd
          Scotland

          ** Remember to give credit where credit is due and leave reputation points where appropriate **

          Comment


          • #6
            Re: Intelligent Message Filter

            Originally posted by Ossian View Post
            IIRC Junk Mail will not work unless the clients are in cached mode
            That I am aware of, but should I turn it on Intelligent Message Filter for spam mails is moved to the Junk Mail folder?

            Comment


            • #7
              Re: Intelligent Message Filter

              That isn't strictly true. Cached mode is only a requirement for the client side filtering in Outlook. And thus cached mode is not a requirement for the IMF as exchange determines via the SCL whether the emails should be moved to the junk mail folder.

              http://www.exchangeinbox.com/article.aspx?i=25&t=3

              Comment


              • #8
                Re: Intelligent Message Filter

                Well I still get spam in the mail-box and I'm not sure what other configurations I have to do.

                Comment


                • #9
                  Re: Intelligent Message Filter

                  To start with I would make the registry change so the SCL is written to the headers. Then you can verify what score the message has been given by looking at the headers. That will configure whether it is working correctly or not.

                  You can also use perform on to see the message count.

                  http://exchange.sembee.info/2003/smtp/imf.asp

                  Simon.
                  --
                  Simon Butler
                  Exchange MVP

                  Blog: http://blog.sembee.co.uk/
                  More Exchange Content: http://exchange.sembee.info/
                  Exchange Resources List: http://exbpa.com/
                  In the UK? Hire me: http://www.sembee.co.uk/

                  Sembee is a registered trademark, used here with permission.

                  Comment


                  • #10
                    Re: Intelligent Message Filter

                    I have downloaded IMF Archive Manager and in there I can see that the SCL field is empty, does that meen that IMF isen't configured correctly or even activated?

                    Comment


                    • #11
                      Re: Intelligent Message Filter

                      Originally posted by hilsoe View Post
                      I have downloaded IMF Archive Manager and in there I can see that the SCL field is empty, does that meen that IMF isen't configured correctly or even activated?
                      Have you made the registry change that is required to expose the value? If not, then you need to. After making the registry change you must restart the SMTP Server service.
                      However that change will only apply to new messages, not to the old ones.

                      If you are seeing messages in the archive then the filter is working, if it wasn't, the archive would be empty!

                      Simon.
                      --
                      Simon Butler
                      Exchange MVP

                      Blog: http://blog.sembee.co.uk/
                      More Exchange Content: http://exchange.sembee.info/
                      Exchange Resources List: http://exbpa.com/
                      In the UK? Hire me: http://www.sembee.co.uk/

                      Sembee is a registered trademark, used here with permission.

                      Comment


                      • #12
                        Re: Intelligent Message Filter

                        Is it this registry you mean?
                        View the Spam Confidence Level of Messages in the Archive
                        Each message is given a spam confidence level (SCL). The level is then used by Exchange to decide what to do with the message.
                        You can get the SCL level entered in to the header of the email messages sent in to the archive via a registry change.
                        HKEY_LOCAL_MACHINE\Software\Microsoft\Exchange\Con tentFilter
                        Right click on ContentFilter and choose New and select DWORD Value.
                        Enter the key name as ArchiveSCL
                        Give the key a value of 1
                        To disable the option, change the value to 0 or delete the key.
                        Another thing, I can see some mails in IMF manager, BUT the mails are not moved to the junk folder in outlook.
                        Last edited by hilsoe; 2nd May 2011, 16:53.

                        Comment


                        • #13
                          Re: Intelligent Message Filter

                          You will see the messages in EITHER the archive or in junk email folder in Outlook. Not both.

                          That is the registry key I am referring to. Set it, restart the SMTP Server Service. Future emails should be tagged with their SCL.

                          Simon.
                          --
                          Simon Butler
                          Exchange MVP

                          Blog: http://blog.sembee.co.uk/
                          More Exchange Content: http://exchange.sembee.info/
                          Exchange Resources List: http://exbpa.com/
                          In the UK? Hire me: http://www.sembee.co.uk/

                          Sembee is a registered trademark, used here with permission.

                          Comment


                          • #14
                            Re: Intelligent Message Filter

                            Okay I can live with having to use IMF Manager to see the mails. The next problem is with the registry, I do not have this HKEY_LOCAL_MACHINE\Software\Microsoft\Exchange\Con tentFilter string.

                            Comment


                            • #15
                              Re: Intelligent Message Filter

                              Create the key then. Not every key is already created.

                              Simon.
                              --
                              Simon Butler
                              Exchange MVP

                              Blog: http://blog.sembee.co.uk/
                              More Exchange Content: http://exchange.sembee.info/
                              Exchange Resources List: http://exbpa.com/
                              In the UK? Hire me: http://www.sembee.co.uk/

                              Sembee is a registered trademark, used here with permission.

                              Comment

                              Working...
                              X