Link to home
Start Free TrialLog in
Avatar of cmdolcet
cmdolcetFlag for United States of America

asked on

How to stop emails spam emails using IMf filter updates

I have looked over so many documents regarding spam filter in IMF and i never can find the trick on how to stop all the emails. I have been told that this software works better than the other. What makes one filter better? I have these crazy emails that have a subject line either blank or "???????-?..." how can i ever filter those out?
Avatar of Hilal1924
Hilal1924
Flag of India image

Which version of Exchange are you using? IMF is a rigid spam filtering service and can be a nuisance in the long run. IMF has a tendency to report a lot of false positives. I would suggest using some third party Spam filtering application to effectively filter out mails like these.
Anyway you can enable IMF from Organization Settings in Exchange 2003 (Expand your Organization object, expand Global Settings. Right-click Message Delivery , Properties, Intelligent Messaging Filter ).
But make sure that you enable updates for IMF otherwise it would not be useful at all. Be default IMF updates are disabled.
 
Here is a good artcle related to IMF :http://www.petri.co.il/block_spam_with_exchange2003_imf.htm
Note: you will Exchange 2003 SP2 to enable IMF.
Hilal
Sorry forgot to mention the Update enable process:
Follow this article to enable updates for IMF:
http://www.petri.co.il/updating_imf_in_exchange_2003.htm
 
Best of Luck
Hilal
IMF is good from a cost perspective, but that's about it.  There are many others that are better but you have to pay for them.  When using IMF, set the Blocking level to 6 and the Junk level to 4 or lower.  But be prepared for false positives as Hilal states.  IMF doesn't learn any patterns, and its only whitelist is the sending server's IP address, which isn't the easiest to administer.  I've been using IMF for a few years - I set the Blocked messages to Archive and built my own whitelist app that redelivers blocked messages if they are in my whitelist.  All you need is notepad for this whitelisting app, and like IMF, it too is free.  https://www.experts-exchange.com/questions/22461861/Whitelist-Exchange-IMF.html
Avatar of bitMASTERS
bitMASTERS

Use connection filtering.  Setup will depend on version of Exchange that you have. If you have Exchange 2007 read this thread

https://www.experts-exchange.com/questions/25350989/SBS-2008-SPAM-FILTER.html

If you have a different version let me know.
Avatar of cmdolcet

ASKER

I have Exchange 2003 SP2. I hear people talking about spam filter updates??? I never updated my spam filter?
ASKER CERTIFIED SOLUTION
Avatar of bitMASTERS
bitMASTERS

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Ok i can try that suggestion bitMasters. I have one more comment how can i stop these types of emails. Their SCL rating is 4 or below.

My IMF filter is set to allow stop everything that is 5 or higher and 4 goes to junk mail. But some get into my inbox similar to this types:

From dreams of having an attractive body, to the reputable tools for making it real! Say goodbye to unnecessary kilos and hallo to the world of lustful gazes and hot affairs,to high confidence and renewed vital energy! <http://www.dewasakut.cn/group.php?group_id=59

or

Follow Here! <http://allownine.com

http://allownine.com


About this mailing:
You are receiving this e-mail because you subscribed to MSN Featured Offers Microsoft respects your privacy. If you do not wish to receive this MSN Featured Offers e-mail, please click the "Unsubscribe" link below. This will not unsubscribe you from e-mail communications from third-party advertisers that may appear in MSN Feature Offers. This shall not constitute an offer by MSN. MSN shall not be responsible or liable for the advertisers' content nor any of the goods or service advertised. Prices and item availability subject to change without notice.

©2010 Microsoft | Unsubscribe <http://allownine.com>  | More Newsletters <http://allownine.com>  | Privacy <http://allownine.com

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052


This message was sent from iContact to techsupport@lmicorporation.com. It was sent from: iContact AutoResponder, 2635 Meridian Pkwy Suite 200, Durham, NC 27713. You can modify/update your subscription via the link below.       Email Marketing Software <http://allownine.com>        

View this message in the iContact Community:  View message <http://allownine.com>  Comment on this message <http://allownine.com>  Receive as RSS <http://allownine.com>       



What RBLs are you using (entered on the Contection Filtering tab)?  I actually just last week updated mine to b.barracudacentral.org (you have to go onto their site and register but it is free) and I've noticed a great reduction is what had been making it through my IMF previously.
Oops, sorry, I should have read bitMASTERS comments.  I can confirm it works!