Re: Tracing lost emails after activiating IMF

Connection Filtering
we used Spamhaus, surbl and uribl until a few weeks ago when we disabled
them due to the high number of valid external contacts who were being blocked.

Sender ID
this is set to Accept

Sender Filtering
set to archive filtered messages/filter messages with blank sender/accept
without notifying. A short list of domains to block has been added.

Recipient Filtering
nothing was set here but I've now opted to filter recipients not in AD. Not
sure how likely this is to increase the amount of spam to genuine address.


--
swtmike


"Alexander Zammit [MVP]" wrote:

IMF can only do 1 of 2 things: Archiving (based on your configuration) or
Moving to Junk .

What about the other anti-spam features?
Have you enabled any of Connection, Sender ID, Sender or Recipient
Filtering?

You can see which of these are enabled from the SMTP Virtual Server
properties.


--
Alexander Zammit
WinDeveloper Software
IMF Tune - Unleash the Full Intelligent Message Filter Power
http://www.windeveloper.com/imftune/


"swtmike" <swtmike@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1DF44238-B57A-43D4-BA28-D47540FBEC62@xxxxxxxxxxxxxxxx
We do use Archive Manager. The emails don't appear in the Junk Mail folder
but they don't show as having been processed by exchange at all (via
Message
Tracking Centre on System Manager). They appear to have disappeared after
leaving our antivirus server. IMF is trapping around 2500 emails per day.
--
swtmike


"Alexander Zammit [MVP]" wrote:

To view the archive emails you could use one of:
IMF Companion
http://stoekenbroek.com/imfcompanion/default.htm

IMF Archive Manager
http://hellomate.typepad.com/exchange/2004/06/imf_archive_man.html

If you still don't find it there then IMF did not block these at the
Gateway.


However maybe these were dumped to the Junk Email folder. Indeed this is
more likely given what you are saying. So you should search also the Junk
folder for the recipient mailboxes to whom the email were addressed..


--
Alexander Zammit
WinDeveloper Software
IMF Tune - Unleash the Full Intelligent Message Filter Power
http://www.windeveloper.com/imftune/


"swtmike" <swtmike@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:849676A0-EB86-4A6B-AA53-7D97E1A3B331@xxxxxxxxxxxxxxxx
Hello,

for the past three months we've been running IMF on a single Exchange
2003
server relying solely on IMF to detect spam. It's been working ok to
date
(we
scan for viruses before email gets to exchange).

We've now become aware of a number of genuine emails from a supplier
that
did not get through, approx 22 emails. We can see that they reached our
gateway ok as they show on our antivirus scanner on a separate
(released
for
delivery to Exchange) but I cannot find a trace of them after that.
I've
checked the log files in exchsrvr/ and archived IMF emails (we've kept
all
emails trapped by IMF) but no joy.

Apart from important content in those emails, there may be others and
I'd
like to be able to check.

I'd be grateful if you can point me in the right direction to look
further
or if you can confirm that I've had it and they've been dropped by IMF
without trace!

swtmike






.

Relevant Pages

  • Re: IMF blocks Blackberry Email
    ... Locate the emails from telus and rogers and add the sending server's IP ... Filtering on the SMTP virtual server. ... filters resides - including IMF, which was moved here from SP2/IMF v2. ...
    (microsoft.public.exchange.admin)
  • Re: filter for spam with pop3 service
    ... For blocking spam you could use the built-in Sender Filtering, ... IMF Tune - Unleash the Full Intelligent Message Filter Power ... In our system many persons get all the emails through a distribution ...
    (microsoft.public.windows.server.sbs)
  • Re: IMF and SCL values
    ... The closest available thing is the Connection Filtering IP Accept List. ... the senders to be whitelisted have their emails coming from the same IPs, ... Since you are having many false postives, did you enable IMF updates? ... However if a user has been added as a safe sender in outlook ... ...
    (microsoft.public.exchange.admin)
  • Re: Email Filtering
    ... What are the SCL ratings on the filtered emails and can you sdjust IMF ... connection Filtering to accomodate? ... I'm not sure about IMF Archieve Manager ...
    (microsoft.public.windows.server.sbs)
  • Re: Tracing lost emails after activiating IMF
    ... IMF has quadrupled since we disabled spamhaus and suburl a few weeks ago. ... those who create most problems are usually Sender ID ... IMF Tune - Unleash the Full Intelligent Message Filter Power ... IMF is trapping around 2500 emails per ...
    (microsoft.public.exchange.admin)