microsoft.public.exchange.admin

I was listening in part to posts here recommending not relying on IMF alone.
Apart from teething issues, I'm more than happy with it so far.

Thanks again.
--
swtmike


"Alexander Zammit [MVP]" wrote:

> IMF users are not cheapskates. You should not listen to people who never
> used IMF or who don't know how to configure it.
> I know many large Comapnies using it successfully for years.
>
> --
> Alexander Zammit
> WinDeveloper Software
> IMF Tune - Unleash the Full Intelligent Message Filter Power
> http://www.windeveloper.com/imftune/
>
>
> "swtmike" wrote in message
> news:38388BF6-359D-4F2A-9CE3-663A9AA1C528@microsoft.com...
> > So it looks like Sender ID as previously set - to delete with no NDR -
> > explains it. We'll leave it set to Accept with RBLs off and see how long
> > we
> > can last without going for third party software (I'd like to say we're not
> > cheapskates but we are a charity...). The amount of emails being trapped
> > by
> > IMF has quadrupled since we disabled spamhaus and suburl a few weeks ago.
> >
> > Many thanks for helping us with this.
> > --
> > swtmike
> >
> >
> > "Alexander Zammit [MVP]" wrote:
> >
> >> From what you are saying IMF is not the one responsible.
> >> From the other filters, those who create most problems are usually Sender
> >> ID
> >> and Connection Filtering RBLs.
> >> Sender ID can cause problems in case of mis-configurations either from
> >> the
> >> Senders end or at your end.
> >> RBLs cause their own problems as you discovered for yourself.
> >>
> >> My suggestion is for you to disable these two and see how it goes...
> >>
> >> --
> >> Alexander Zammit
> >> WinDeveloper Software
> >> IMF Tune - Unleash the Full Intelligent Message Filter Power
> >> http://www.windeveloper.com/imftune/
> >>
> >>
> >> "swtmike" wrote in message
> >> news:3AC28838-EB24-4FB6-8415-A47451CA90A0@microsoft.com...
> >> > Correction - Sender ID was set to Delete originally, changed to Accept
> >> > a
> >> > few
> >> > hours ago.
> >> > --
> >> > swtmike
> >> >
> >> >
> >> > "Alexander Zammit [MVP]" wrote:
> >> >
> >> >> IMF can only do 1 of 2 things: Archiving (based on your configuration)
> >> >> or
> >> >> Moving to Junk .
> >> >>
> >> >> What about the other anti-spam features?
> >> >> Have you enabled any of Connection, Sender ID, Sender or Recipient
> >> >> Filtering?
> >> >>
> >> >> You can see which of these are enabled from the SMTP Virtual Server
> >> >> properties.
> >> >>
> >> >>
> >> >> --
> >> >> Alexander Zammit
> >> >> WinDeveloper Software
> >> >> IMF Tune - Unleash the Full Intelligent Message Filter Power
> >> >> http://www.windeveloper.com/imftune/
> >> >>
> >> >>
> >> >> "swtmike" wrote in message
> >> >> news:1DF44238-B57A-43D4-BA28-D47540FBEC62@microsoft.com...
> >> >> > We do use Archive Manager. The emails don't appear in the Junk Mail
> >> >> > folder
> >> >> > but they don't show as having been processed by exchange at all (via
> >> >> > Message
> >> >> > Tracking Centre on System Manager). They appear to have disappeared
> >> >> > after
> >> >> > leaving our antivirus server. IMF is trapping around 2500 emails per
> >> >> > day.
> >> >> > --
> >> >> > swtmike
> >> >> >
> >> >> >
> >> >> > "Alexander Zammit [MVP]" wrote:
> >> >> >
> >> >> >> To view the archive emails you could use one of:
> >> >> >> IMF Companion
> >> >> >> http://stoekenbroek.com/imfcompanion/default.htm
> >> >> >>
> >> >> >> IMF Archive Manager
> >> >> >> http://hellomate.typepad.com/exchange/2004/06/imf_archive_man.html
> >> >> >>
> >> >> >> If you still don't find it there then IMF did not block these at
> >> >> >> the
> >> >> >> Gateway.
> >> >> >>
> >> >> >>
> >> >> >> However maybe these were dumped to the Junk Email folder. Indeed
> >> >> >> this
> >> >> >> is
> >> >> >> more likely given what you are saying. So you should search also
> >> >> >> the
> >> >> >> Junk
> >> >> >> folder for the recipient mailboxes to whom the email were
> >> >> >> addressed..
> >> >> >>
> >> >> >>
> >> >> >> --
> >> >> >> Alexander Zammit
> >> >> >> WinDeveloper Software
> >> >> >> IMF Tune - Unleash the Full Intelligent Message Filter Power
> >> >> >> http://www.windeveloper.com/imftune/
> >> >> >>
> >> >> >>
> >> >> >> "swtmike" wrote in message
> >> >> >> news:849676A0-EB86-4A6B-AA53-7D97E1A3B331@microsoft.com...
> >> >> >> > Hello,
> >> >> >> >
> >> >> >> > for the past three months we've been running IMF on a single
> >> >> >> > Exchange
> >> >> >> > 2003
> >> >> >> > server relying solely on IMF to detect spam. It's been working ok
> >> >> >> > to
> >> >> >> > date
> >> >> >> > (we
> >> >> >> > scan for viruses before email gets to exchange).
> >> >> >> >
> >> >> >> > We've now become aware of a number of genuine emails from a
> >> >> >> > supplier
> >> >> >> > that
> >> >> >> > did not get through, approx 22 emails. We can see that they
> >> >> >> > reached
> >> >> >> > our
> >> >> >> > gateway ok as they show on our antivirus scanner on a separate
> >> >> >> > (released
> >> >> >> > for
> >> >> >> > delivery to Exchange) but I cannot find a trace of them after
> >> >> >> > that.
> >> >> >> > I've
> >> >> >> > checked the log files in exchsrvr/ and archived IMF emails (we've
> >> >> >> > kept
> >> >> >> > all
> >> >> >> > emails trapped by IMF) but no joy.
> >> >> >> >
> >> >> >> > Apart from important content in those emails, there may be others
> >> >> >> > and
> >> >> >> > I'd
> >> >> >> > like to be able to check.
> >> >> >> >
> >> >> >> > I'd be grateful if you can point me in the right direction to
> >> >> >> > look
> >> >> >> > further
> >> >> >> > or if you can confirm that I've had it and they've been dropped
> >> >> >> > by
> >> >> >> > IMF
> >> >> >> > without trace!
> >> >> >> >
> >> >> >> > swtmike
> >> >> >>
> >> >> >>
> >> >> >>
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>