asked on

IMF Filter on alternate email address

I have installed IMF which is filtering out spam fairly well. I have one user in the organisation that has an additional email address set up on their main box. The additional address is for a different domain than the main one. My problem is that IMF only seems to filter on the main domain addresses and allows all spam through that is sent to the alternate address.
What am I missing?

tigermatt

IMF will only filter messages which are processed by your Exchange Server, i.e. the MX record points to Exchange and mail is delivered directly to the server. From what you've said, am I correct in thinking the second address is a POP3 account? If so, IMF won't filter mail received through it since it isn't being processed by the Exchange Server, it is simply stored in the user's exchange mailbox.

To get around this, you would need to change the MX record of the second domain to point to Exchange, then configure the user with a second mailbox and email address to allow them to receive mail at the address they had before.

APhoenixRising

ASKER

The secondary address is processed by the exchange server which is responsible for all mail to that domain. Does IMF only work on the primary address?

tigermatt

No, IMF works for all addresses. It could be however that the spam coming to the second address simply isn't "bad enough" to be filtered by IMF, or is it spam of a similar nature? Check your SCL ratings and make sure they aren't too high. I would normally have 6/7 at the gateway and then 5/6 at the mailbox store. If it's really bad I might go down to 4 at the store, but I find it much better to leave the gateway with a higher level and control it more on the store.

APhoenixRising

ASKER

IMF is set with threshold of 7 and 4. I have an SLC field in outlook and this user is receiving messages with an 8. All other users, the mail goes into their junk mail folder no problem.

tigermatt

Has the user got some sort of good email address or good domain setup in Outlook to stop this sort of mail being filtered out as junk? Check that first.

Also if it has an SCL of 8 then it should be detected at the gateway and have your action specified there performed. Check what action have you got it set to do at the gateway?

APhoenixRising

ASKER

The gateway is set to reject messages above a 7. All users except this one are filtered correctly. I might just delete them, recreate and restore their messages.

ASKER CERTIFIED SOLUTION

tigermatt

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

APhoenixRising

ASKER

Okay, I deleted the user, recreated them and restored their messages and everything is now fine.

Strange.

Thanks for your help.

tigermatt

Awfully strange, perhaps some corrupt setting or something?

Thanks.