IMF filter not working in mixed mode Exchange 1

[netadmin65]

My new e-mail server is Exchange 2003 SP2.

My legacy server is Exchange 5.5 . They coexist
in the same domain.

The Exchange 5.5 server is the one facing the Internet.
Users are slowly being migrated to the 2003 server, and
eventually I'll decommission the legacy (5.5) server.
Exchange 5.5 relays any messages to or from the Exchange
2003 users.

I have Intelligent Message Filter (IMF) enabled on 2003.

If I telnet to port 25 on the Exchange 2003, and set up
an obvious spam message to one of the 2003 users, then
Exchange 2003 catches it, and throws it in the UceArchive
folder. However, if I send the same message from an account on the Exchange 5.5 server or from out on the
Internet somewhere to an Exchange 2003 user (remember,
the 5.5 machine relays the messages), then IMF seems to
be bypassed.

Is this behaviour normal? How can I resolve this problem?

Note: I do have anti-virus and anti-spam on the gateway
(Exchange 5.5) server. I just turn portions of it off to
perform this test. Maybe "potency drugs", for example, so
I can test with the "V" word.

 

[DanMIS]

Internal mail never gets caught as SPAM. IMF assigns it a SCL of -1.

Search for a utility to allow you to see the SCL of mail in the inbox. Also, you can see it in the headers of incoming mail.

Since the 5.5 server faces outside, IMF sees all the mail as internal mail.

Dan

CCA Citrix 4.0
MCP 2003
70-290 Passed
70-291 Passed

 

[netadmin65]

Thanks Dan. That is the problem. I gave you a star.

 

[netadmin65]

Dan, I wish I could give you two stars. Your answer
got me thinking (usually a bad thing), and I found this
Microsoft site:

hxxp://technet.microsoft.com/en-us/library/78dae136-9600-4f2c-87d3-381448f888df.aspx

(Change hxxp to http. I'm not sure if links are allowed, and did not want to tick off the moderators)

Look under "Filtering Messages sent through Authenticated
Connections"

Thanks again!