How to stop emails spam emails using IMf filter updates

I have looked over so many documents regarding spam filter in IMF and i never can find the trick on how to stop all the emails. I have been told that this software works better than the other. What makes one filter better? I have these crazy emails that have a subject line either blank or "???????-?..." how can i ever filter those out?
cmdolcetAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Hilal1924Commented:
Which version of Exchange are you using? IMF is a rigid spam filtering service and can be a nuisance in the long run. IMF has a tendency to report a lot of false positives. I would suggest using some third party Spam filtering application to effectively filter out mails like these.
Anyway you can enable IMF from Organization Settings in Exchange 2003 (Expand your Organization object, expand Global Settings. Right-click Message Delivery , Properties, Intelligent Messaging Filter ).
But make sure that you enable updates for IMF otherwise it would not be useful at all. Be default IMF updates are disabled.
 
Here is a good artcle related to IMF :http://www.petri.co.il/block_spam_with_exchange2003_imf.htm
Note: you will Exchange 2003 SP2 to enable IMF.
Hilal
0
Hilal1924Commented:
Sorry forgot to mention the Update enable process:
Follow this article to enable updates for IMF:
http://www.petri.co.il/updating_imf_in_exchange_2003.htm
 
Best of Luck
Hilal
0
TWBitCommented:
IMF is good from a cost perspective, but that's about it.  There are many others that are better but you have to pay for them.  When using IMF, set the Blocking level to 6 and the Junk level to 4 or lower.  But be prepared for false positives as Hilal states.  IMF doesn't learn any patterns, and its only whitelist is the sending server's IP address, which isn't the easiest to administer.  I've been using IMF for a few years - I set the Blocked messages to Archive and built my own whitelist app that redelivers blocked messages if they are in my whitelist.  All you need is notepad for this whitelisting app, and like IMF, it too is free.  http://www.experts-exchange.com/Software/Internet_Email/Q_22461861.html
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

bitMASTERSCommented:
Use connection filtering.  Setup will depend on version of Exchange that you have. If you have Exchange 2007 read this thread

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Q_25350989.html

If you have a different version let me know.
0
cmdolcetAuthor Commented:
I have Exchange 2003 SP2. I hear people talking about spam filter updates??? I never updated my spam filter?
0
bitMASTERSCommented:
Configuring your connection filtering will resolve your problems nicely.  Follow the instructions in this blog.  http://msmvps.com/blogs/bradley/archive/2007/08/12/a-little-more-spam-filtering.aspx

If you find that spamhaus alone isn't cutting it.  I would add b.barracudacentral.org as a second rbl provider.  Note you will have to register with barracuda at barracudacentral.org.  Registration is not necessary iwth zen.spamhaus.org.

Good luck and let me know how it turns out.

0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
cmdolcetAuthor Commented:
Ok i can try that suggestion bitMasters. I have one more comment how can i stop these types of emails. Their SCL rating is 4 or below.

My IMF filter is set to allow stop everything that is 5 or higher and 4 goes to junk mail. But some get into my inbox similar to this types:

From dreams of having an attractive body, to the reputable tools for making it real! Say goodbye to unnecessary kilos and hallo to the world of lustful gazes and hot affairs,to high confidence and renewed vital energy! <http://www.dewasakut.cn/group.php?group_id=59

or

Follow Here! <http://allownine.com

http://allownine.com


About this mailing:
You are receiving this e-mail because you subscribed to MSN Featured Offers Microsoft respects your privacy. If you do not wish to receive this MSN Featured Offers e-mail, please click the "Unsubscribe" link below. This will not unsubscribe you from e-mail communications from third-party advertisers that may appear in MSN Feature Offers. This shall not constitute an offer by MSN. MSN shall not be responsible or liable for the advertisers' content nor any of the goods or service advertised. Prices and item availability subject to change without notice.

©2010 Microsoft | Unsubscribe <http://allownine.com>  | More Newsletters <http://allownine.com>  | Privacy <http://allownine.com

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052


This message was sent from iContact to techsupport@lmicorporation.com. It was sent from: iContact AutoResponder, 2635 Meridian Pkwy Suite 200, Durham, NC 27713. You can modify/update your subscription via the link below.       Email Marketing Software <http://allownine.com>        

View this message in the iContact Community:  View message <http://allownine.com>  Comment on this message <http://allownine.com>  Receive as RSS <http://allownine.com>       



0
TWBitCommented:
What RBLs are you using (entered on the Contection Filtering tab)?  I actually just last week updated mine to b.barracudacentral.org (you have to go onto their site and register but it is free) and I've noticed a great reduction is what had been making it through my IMF previously.
0
TWBitCommented:
Oops, sorry, I should have read bitMASTERS comments.  I can confirm it works!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.