microsoft.public.exchange.admin

IMF users are not cheapskates. You should not listen to people who never
used IMF or who don't know how to configure it.
I know many large Comapnies using it successfully for years.

--
Alexander Zammit
WinDeveloper Software
IMF Tune - Unleash the Full Intelligent Message Filter Power
http://www.windeveloper.com/imftune/


"swtmike" wrote in message
news:38388BF6-359D-4F2A-9CE3-663A9AA1C528@microsoft.com...
> So it looks like Sender ID as previously set - to delete with no NDR -
> explains it. We'll leave it set to Accept with RBLs off and see how long
> we
> can last without going for third party software (I'd like to say we're not
> cheapskates but we are a charity...). The amount of emails being trapped
> by
> IMF has quadrupled since we disabled spamhaus and suburl a few weeks ago.
>
> Many thanks for helping us with this.
> --
> swtmike
>
>
> "Alexander Zammit [MVP]" wrote:
>
>> From what you are saying IMF is not the one responsible.
>> From the other filters, those who create most problems are usually Sender
>> ID
>> and Connection Filtering RBLs.
>> Sender ID can cause problems in case of mis-configurations either from
>> the
>> Senders end or at your end.
>> RBLs cause their own problems as you discovered for yourself.
>>
>> My suggestion is for you to disable these two and see how it goes...
>>
>> --
>> Alexander Zammit
>> WinDeveloper Software
>> IMF Tune - Unleash the Full Intelligent Message Filter Power
>> http://www.windeveloper.com/imftune/
>>
>>
>> "swtmike" wrote in message
>> news:3AC28838-EB24-4FB6-8415-A47451CA90A0@microsoft.com...
>> > Correction - Sender ID was set to Delete originally, changed to Accept
>> > a
>> > few
>> > hours ago.
>> > --
>> > swtmike
>> >
>> >
>> > "Alexander Zammit [MVP]" wrote:
>> >
>> >> IMF can only do 1 of 2 things: Archiving (based on your configuration)
>> >> or
>> >> Moving to Junk .
>> >>
>> >> What about the other anti-spam features?
>> >> Have you enabled any of Connection, Sender ID, Sender or Recipient
>> >> Filtering?
>> >>
>> >> You can see which of these are enabled from the SMTP Virtual Server
>> >> properties.
>> >>
>> >>
>> >> --
>> >> Alexander Zammit
>> >> WinDeveloper Software
>> >> IMF Tune - Unleash the Full Intelligent Message Filter Power
>> >> http://www.windeveloper.com/imftune/
>> >>
>> >>
>> >> "swtmike" wrote in message
>> >> news:1DF44238-B57A-43D4-BA28-D47540FBEC62@microsoft.com...
>> >> > We do use Archive Manager. The emails don't appear in the Junk Mail
>> >> > folder
>> >> > but they don't show as having been processed by exchange at all (via
>> >> > Message
>> >> > Tracking Centre on System Manager). They appear to have disappeared
>> >> > after
>> >> > leaving our antivirus server. IMF is trapping around 2500 emails per
>> >> > day.
>> >> > --
>> >> > swtmike
>> >> >
>> >> >
>> >> > "Alexander Zammit [MVP]" wrote:
>> >> >
>> >> >> To view the archive emails you could use one of:
>> >> >> IMF Companion
>> >> >> http://stoekenbroek.com/imfcompanion/default.htm
>> >> >>
>> >> >> IMF Archive Manager
>> >> >> http://hellomate.typepad.com/exchange/2004/06/imf_archive_man.html
>> >> >>
>> >> >> If you still don't find it there then IMF did not block these at
>> >> >> the
>> >> >> Gateway.
>> >> >>
>> >> >>
>> >> >> However maybe these were dumped to the Junk Email folder. Indeed
>> >> >> this
>> >> >> is
>> >> >> more likely given what you are saying. So you should search also
>> >> >> the
>> >> >> Junk
>> >> >> folder for the recipient mailboxes to whom the email were
>> >> >> addressed..
>> >> >>
>> >> >>
>> >> >> --
>> >> >> Alexander Zammit
>> >> >> WinDeveloper Software
>> >> >> IMF Tune - Unleash the Full Intelligent Message Filter Power
>> >> >> http://www.windeveloper.com/imftune/
>> >> >>
>> >> >>
>> >> >> "swtmike" wrote in message
>> >> >> news:849676A0-EB86-4A6B-AA53-7D97E1A3B331@microsoft.com...
>> >> >> > Hello,
>> >> >> >
>> >> >> > for the past three months we've been running IMF on a single
>> >> >> > Exchange
>> >> >> > 2003
>> >> >> > server relying solely on IMF to detect spam. It's been working ok
>> >> >> > to
>> >> >> > date
>> >> >> > (we
>> >> >> > scan for viruses before email gets to exchange).
>> >> >> >
>> >> >> > We've now become aware of a number of genuine emails from a
>> >> >> > supplier
>> >> >> > that
>> >> >> > did not get through, approx 22 emails. We can see that they
>> >> >> > reached
>> >> >> > our
>> >> >> > gateway ok as they show on our antivirus scanner on a separate
>> >> >> > (released
>> >> >> > for
>> >> >> > delivery to Exchange) but I cannot find a trace of them after
>> >> >> > that.
>> >> >> > I've
>> >> >> > checked the log files in exchsrvr/ and archived IMF emails (we've
>> >> >> > kept
>> >> >> > all
>> >> >> > emails trapped by IMF) but no joy.
>> >> >> >
>> >> >> > Apart from important content in those emails, there may be others
>> >> >> > and
>> >> >> > I'd
>> >> >> > like to be able to check.
>> >> >> >
>> >> >> > I'd be grateful if you can point me in the right direction to
>> >> >> > look
>> >> >> > further
>> >> >> > or if you can confirm that I've had it and they've been dropped
>> >> >> > by
>> >> >> > IMF
>> >> >> > without trace!
>> >> >> >
>> >> >> > swtmike
>> >> >>
>> >> >>
>> >> >>
>> >>
>> >>
>> >>
>>
>>
>>