Re: Tracing lost emails after activiating IMF

IMF can only do 1 of 2 things: Archiving (based on your configuration) or
Moving to Junk .

What about the other anti-spam features?
Have you enabled any of Connection, Sender ID, Sender or Recipient
Filtering?

You can see which of these are enabled from the SMTP Virtual Server
properties.


--
Alexander Zammit
WinDeveloper Software
IMF Tune - Unleash the Full Intelligent Message Filter Power
http://www.windeveloper.com/imftune/


"swtmike" <swtmike@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1DF44238-B57A-43D4-BA28-D47540FBEC62@xxxxxxxxxxxxxxxx
We do use Archive Manager. The emails don't appear in the Junk Mail folder
but they don't show as having been processed by exchange at all (via
Message
Tracking Centre on System Manager). They appear to have disappeared after
leaving our antivirus server. IMF is trapping around 2500 emails per day.
--
swtmike


"Alexander Zammit [MVP]" wrote:

To view the archive emails you could use one of:
IMF Companion
http://stoekenbroek.com/imfcompanion/default.htm

IMF Archive Manager
http://hellomate.typepad.com/exchange/2004/06/imf_archive_man.html

If you still don't find it there then IMF did not block these at the
Gateway.


However maybe these were dumped to the Junk Email folder. Indeed this is
more likely given what you are saying. So you should search also the Junk
folder for the recipient mailboxes to whom the email were addressed..


--
Alexander Zammit
WinDeveloper Software
IMF Tune - Unleash the Full Intelligent Message Filter Power
http://www.windeveloper.com/imftune/


"swtmike" <swtmike@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:849676A0-EB86-4A6B-AA53-7D97E1A3B331@xxxxxxxxxxxxxxxx
Hello,

for the past three months we've been running IMF on a single Exchange
2003
server relying solely on IMF to detect spam. It's been working ok to
date
(we
scan for viruses before email gets to exchange).

We've now become aware of a number of genuine emails from a supplier
that
did not get through, approx 22 emails. We can see that they reached our
gateway ok as they show on our antivirus scanner on a separate
(released
for
delivery to Exchange) but I cannot find a trace of them after that.
I've
checked the log files in exchsrvr/ and archived IMF emails (we've kept
all
emails trapped by IMF) but no joy.

Apart from important content in those emails, there may be others and
I'd
like to be able to check.

I'd be grateful if you can point me in the right direction to look
further
or if you can confirm that I've had it and they've been dropped by IMF
without trace!

swtmike





.

Relevant Pages

  • Re: Tracing lost emails after activiating IMF
    ... IMF Tune - Unleash the Full Intelligent Message Filter Power ... IMF is trapping around 2500 emails per day. ... However maybe these were dumped to the Junk Email folder. ...
    (microsoft.public.exchange.admin)
  • Re: Tracing lost emails after activiating IMF
    ... IMF Tune - Unleash the Full Intelligent Message Filter Power ... IMF is trapping around 2500 emails per day. ... However maybe these were dumped to the Junk Email folder. ...
    (microsoft.public.exchange.admin)
  • Re: IMF problem
    ... How can I look for the SCL of the both emails?? ... The value of the "Block messages with an SCL rating greater" is 7. ... In the Sotre Junk E-mail configuration, the value of the "Move messages ... Issue most likely caused by IMF or End User Rules. ...
    (microsoft.public.exchange.admin)
  • Re: Tracing lost emails after activiating IMF
    ... Actually my business activity proves that IMF ... IMF Tune - Unleash the Full Intelligent Message Filter Power ... The amount of emails being trapped ... Sender ID can cause problems in case of mis-configurations either from ...
    (microsoft.public.exchange.admin)
  • Re: IMF and SCL values
    ... The closest available thing is the Connection Filtering IP Accept List. ... the senders to be whitelisted have their emails coming from the same IPs, ... Since you are having many false postives, did you enable IMF updates? ... However if a user has been added as a safe sender in outlook ... ...
    (microsoft.public.exchange.admin)
Loading