How to stop emails spam emails using IMf filter updates

I have looked over so many documents regarding spam filter in IMF and i never can find the trick on how to stop all the emails. I have been told that this software works better than the other. What makes one filter better? I have these crazy emails that have a subject line either blank or "???????-?..." how can i ever filter those out?
cmdolcetAsked:
Who is Participating?
 
bitMASTERSConnect With a Mentor Commented:
Configuring your connection filtering will resolve your problems nicely.  Follow the instructions in this blog.  http://msmvps.com/blogs/bradley/archive/2007/08/12/a-little-more-spam-filtering.aspx

If you find that spamhaus alone isn't cutting it.  I would add b.barracudacentral.org as a second rbl provider.  Note you will have to register with barracuda at barracudacentral.org.  Registration is not necessary iwth zen.spamhaus.org.

Good luck and let me know how it turns out.

0
 
Hilal1924Commented:
Which version of Exchange are you using? IMF is a rigid spam filtering service and can be a nuisance in the long run. IMF has a tendency to report a lot of false positives. I would suggest using some third party Spam filtering application to effectively filter out mails like these.
Anyway you can enable IMF from Organization Settings in Exchange 2003 (Expand your Organization object, expand Global Settings. Right-click Message Delivery , Properties, Intelligent Messaging Filter ).
But make sure that you enable updates for IMF otherwise it would not be useful at all. Be default IMF updates are disabled.
 
Here is a good artcle related to IMF :http://www.petri.co.il/block_spam_with_exchange2003_imf.htm
Note: you will Exchange 2003 SP2 to enable IMF.
Hilal
0
 
Hilal1924Commented:
Sorry forgot to mention the Update enable process:
Follow this article to enable updates for IMF:
http://www.petri.co.il/updating_imf_in_exchange_2003.htm
 
Best of Luck
Hilal
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
TWBitCommented:
IMF is good from a cost perspective, but that's about it.  There are many others that are better but you have to pay for them.  When using IMF, set the Blocking level to 6 and the Junk level to 4 or lower.  But be prepared for false positives as Hilal states.  IMF doesn't learn any patterns, and its only whitelist is the sending server's IP address, which isn't the easiest to administer.  I've been using IMF for a few years - I set the Blocked messages to Archive and built my own whitelist app that redelivers blocked messages if they are in my whitelist.  All you need is notepad for this whitelisting app, and like IMF, it too is free.  http://www.experts-exchange.com/Software/Internet_Email/Q_22461861.html
0
 
bitMASTERSCommented:
Use connection filtering.  Setup will depend on version of Exchange that you have. If you have Exchange 2007 read this thread

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Q_25350989.html

If you have a different version let me know.
0
 
cmdolcetAuthor Commented:
I have Exchange 2003 SP2. I hear people talking about spam filter updates??? I never updated my spam filter?
0
 
cmdolcetAuthor Commented:
Ok i can try that suggestion bitMasters. I have one more comment how can i stop these types of emails. Their SCL rating is 4 or below.

My IMF filter is set to allow stop everything that is 5 or higher and 4 goes to junk mail. But some get into my inbox similar to this types:

From dreams of having an attractive body, to the reputable tools for making it real! Say goodbye to unnecessary kilos and hallo to the world of lustful gazes and hot affairs,to high confidence and renewed vital energy! <http://www.dewasakut.cn/group.php?group_id=59

or

Follow Here! <http://allownine.com

http://allownine.com


About this mailing:
You are receiving this e-mail because you subscribed to MSN Featured Offers Microsoft respects your privacy. If you do not wish to receive this MSN Featured Offers e-mail, please click the "Unsubscribe" link below. This will not unsubscribe you from e-mail communications from third-party advertisers that may appear in MSN Feature Offers. This shall not constitute an offer by MSN. MSN shall not be responsible or liable for the advertisers' content nor any of the goods or service advertised. Prices and item availability subject to change without notice.

©2010 Microsoft | Unsubscribe <http://allownine.com>  | More Newsletters <http://allownine.com>  | Privacy <http://allownine.com

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052


This message was sent from iContact to techsupport@lmicorporation.com. It was sent from: iContact AutoResponder, 2635 Meridian Pkwy Suite 200, Durham, NC 27713. You can modify/update your subscription via the link below.       Email Marketing Software <http://allownine.com>        

View this message in the iContact Community:  View message <http://allownine.com>  Comment on this message <http://allownine.com>  Receive as RSS <http://allownine.com>       



0
 
TWBitCommented:
What RBLs are you using (entered on the Contection Filtering tab)?  I actually just last week updated mine to b.barracudacentral.org (you have to go onto their site and register but it is free) and I've noticed a great reduction is what had been making it through my IMF previously.
0
 
TWBitCommented:
Oops, sorry, I should have read bitMASTERS comments.  I can confirm it works!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.