Intelligent Message Filter

[TechCarnivore]

Hi Gang,
I've been asked to implement and configure Exchanges Intelligent Message Filter.

The installation is straight forward. My question is the Gateway blocking configuration set up has a drop down that archives blocked messages. How do I access this archive to look for false positives?

additionally how would you folks rate the IMF?
Would I be better off buying a 3rd party product?


Thanks.

 

[Shawnyboy]

The Archive defaults to \Exchsrvr\mailroot\vsi n\UCEArchive, where n is the SMTP virtual server instance number (usually vsi 1).

To change the location of the archive directory:

1. In Registry Editor (regedit), navigate to the following Key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Exchange\ContentFilter

2. In the details pane, right-click ContentFilter, click New, and then click String value.

3. Type ArchiveDir for the registry key value.

4. Right-click ArchiveDir, and then click Modify.

5. In Edit String, under Value Data, enter the full directory path where you want to archive messages filtered by Intelligent Message Filter. For example, type C:\Archive.

Shawn Johnson

http://blog.texans-fans.com

 

[Shawnyboy]

As for the IMF as an Anti-Spam tool, I think it does quite nicely. I implemented it on an SBS installation and it dramatically reduced the amount of SPAM that my customers were receiving.

Also, You can use the following tool to view the contents of the Archive directory. It uses a web page layout and makes finding false positives much easier:

http://hellomate.typepad.com/exchange/2004/06/imf_archive_man.html

Shawn Johnson

http://blog.texans-fans.com

 

[TechCarnivore]

Shawn,
Texans eh? Well at least you do well with IT...
Thanks ;-) very much for your input.

 

[58sniper]

Make sure you also implement

How to update the Intelligent Message Filter version 2 in Exchange Server 2003 SP2

http://support.microsoft.com/kb/907747

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)

 

[TechCarnivore]

Pat,
You're a sharp one, I almost always keep an eye on your posts. Whether they're relevant to my world or not.

Thank you too....

 

[markdmac]

Here is a link to my IMF managementsolution. Freeware...

http://www.thespidersparlor.com/downloads/imfspam.zip

To enable the IMF updates:

'==========================================================================
'
' NAME: IMFUpdateEnabler.vbs
'
' AUTHOR: Mark D. MacLachlan , The Spider's Parlor
' URL: [URL unfurl="true"]http://www.thespidersparlor.com[/URL]
' (c) 2006 All Rights Reserved
' DATE  : 5/22/2006
'
' COMMENT: Configures IMF to receive updates via Windows Update
'==========================================================================
keypath ="HKLM\SOFTWARE\Microsoft\Exchange\ContentFilterState"
Set WSHShell = CreateObject("Wscript.Shell")
WshShell.RegWrite keypath, 1, "REG_DWORD"
If Not Err Then
		If Msgbox("In order to complete setup, the SMTP service must be restarted.  OK to restart SMTP?", vbYesNo, "Restart SMTP?") = vbYes Then
		    WSHShell.Run "CMD.EXE /C NET STOP SMTPSVC & NET START SMTPSVC"
		End if
Else
	MsgBox "Sorry A Problem Was Encountered" & vbCrLf & "Make sure you have permission to write to the registry.",,"Something went wrong"
End If	
WScript.Quit

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[58sniper]

Thanks, TechCarnivore. I appreciate that. Someone else here noticed as well, because I've been notified I'm up for the Microsoft MVP award.

Anyways, the IMF works well. There are some features it lacks, including whitelisting and blacklisting, but it does a fairly decent job. And who's to say you can use both an internal and external option, or a free and 3rd party option, together?

Many people probably haven't seen this:
Exchange Server 2003 Intelligent Message Filter does not provide the functionality to exclude a particular recipient from anti-spam filtering

http://support.microsoft.com/kb/912587

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)

 

[markdmac]

Good luck on the MVP Pat. I was up for it and started to work for MS again and then no longer qualified. Hope you get it, it is a great honor.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript