Are You Using IMF?
Are you sick of spam? Did you realize that on your SBS 2003 server Microsoft provides a free spam fighting engine? Yep the Intelligent Messaging Filter is a nice add on to Exchange 2003.
Here's a step by step process on what you can do to get it going properly and easily manage it:
Go to the M&M site (home of the SBS MVP's Mariette and Marina) and see step by step details on how to install the IMF on your SBS machine.
Then go to either 1: The Exchange Blog and get the web based archive manager or go to 2: The Exchange Team's GotDotNet site and get the DotNet version of Archive Manager . I personally use the second version. It's clean and runs as a simple .exe file that I can easily put on the desktop of my client's servers. You can easily scan entries and resubmit if needed to the Exchange pickup queue.
Don't forget to enable the reg key to get the SCL (Spam Confidence Level) displayed in the archive utility. The IMF deployment guide on Technet can help you in this. But essentially you go to HKEY_LOCAL_MACHINE\Software\Microsoft\Exchange\ContentFilter and enter a new DWord of ArchiveSCL=1. That's it now you've got Microsoft's SCL listing.
Now what should you set up for the SCL? Well remember that the LOWER you go with the numbers the more spam you catch. I have to say I have initially set mine rather high but have adjusted as I see how much spam and false positives come in. I have my client's set to 7 right now. I think this might be adjusted but I don't know which is worse having a client state "I have too much spam" or "that dang filter ate an email." Remember that email is the lifeblood of a good business nowadays so step lightly when it comes you adjusting your SCL.
Oh and one other point, the Exchange Team yesterday reminded us that an update to IMF is on the way early next year. It'll be eagerly accepted!
So go out and stomp out that SPAM now.
3 Comments:
Thanks for the info to help me get started with IMF. Just curious if you ever considered using the DNS blocklists feature of E2k3, in addition to - or instead of - IMF.
Since you are basically blind as to what e-mails the BL blocks, I see an interesting program "OR Filter" (http://martijnjongen.com/Default.aspx?tabid=27) which saves rejected e-mail into a mailbox, and also allows keyword filtering, whitelist/blacklists, etc.
Thanks for responding. I use the IMF and perhaps Trend Micro's C/S/M suite as well if the client has it. I have not used RBL or DNS blocks in the past. I guess the real reason I don't use them is I've been burned by them in the past where a client on a perfectly good DSL/Cable line has been flagged by these as a dial up client or spammer and thus put on a RBL and had their email bounced by other servers. I know Microsoft and what they can do for me, I guess I don't know some of these RBL lists going around and have been hesitant to use them. The link you provide is interesting and I'll take a look at it! Thanks.
Nice post and a good introduction to your blog. I was looking to see if there was a possibility of whitelisting domains in imf as imf keeps blocking emails from a company we need :-(
THe scl hack will be handy - ive implemented it now and I've also added your blog to my rss feeds - thanks.
Post a Comment
<< Home