|
|
 Anti-Spam for Exchange 2003, 2007, 2010 IMF/Content Filter - Unleash its full power!!
Check the following frequently asked questions to quickly resolve/answer common questions. Choose your question type:
Technical FAQs
Sales/Licensing FAQs
Which Exchange versions/platforms does IMF Tune Support? IMF Tune V5 supports all of Exchange 2003, 2007 and 2010. It also supports the Windows Server platforms from Windows 2003 up to Windows 2008 R2, including Windows Small Business Server (SBS) releases. For a detailed list of all the supported Exchange / Windows platform scenarios please refer to the IMF Tune v5 – Platform Support matrix.
How does IMF Tune help to quickly verify emails at the junk email folder? IMF Tune enables the insertion of SCL ratings into the email subject. This is inserted as a prefix in the format (SCL: x). Thus at the junk email folder one can easily sort all emails by SCL rating. Since false positives are most likely to happen with the lowest SCL rating, sorting enables verification of these emails first. Read Complete Article...
How do I configure emails to be deposited to the junk email folder? IMF Tune does not change anything in the way emails are moved to the junk email folder. Hence this is purely a matter of configuring the Exchange 2007/2010 Content Filter or the Exchange 2003 Intelligent Message Filter and the email clients. Read Complete Article...
Why aren't emails ending in the junk email folder? For emails to be deposited to the junk email folder rather than the inbox you need to make sure that this functionality is enabled at the client mailbox. But before doing this make sure that the Content Filter/IMF is also correctly configured at the Exchange Server. See more details from: How do I configure emails to be deposited to the junk email folder? If you already verified the Exchange Server settings, then check that the junk email folder is enabled at the client mailbox. This can be done either through OWA or through scripting. Read Complete Article...
Why isn't IMF Tune processing any emails? You need to make sure that the Content Filter/IMF is enabled at Exchange and also that IMF Tune is enabled at the configuration. Read Complete Article...
How do I force an email to go to the Junk Email Folder? Typically you need to do this when spam still manages to reach the recipient Inbox. Read Complete Article...
How do I configure IMF Tune to only insert the SCL rating in emails ending in the junk email folder?
How do I use IMF Tune to improve the SCL threshold configuration? Optimizing SCL threshold configuration typically aims to
To get the best out of IMF we need to monitor how a set of configuration settings is performing. IMF Tune helps in this task in the following ways:
How do I separate email archives/logs based on SCL ratings? At IMF Tune create multiple Archive/Logging Profiles. One for each of the SCL ranges requiring independent logging/archiving. In this manner you can setup a unique log file/archive directory for each of the SCL ranges.
Why should I disable Gateway filtering actions at the Content Filter/IMF? IMF Tune only processes email after that the Exchange Content Filter/IMF finishes its processing. Any emails blocked by the Exchange Filter are not processed by IMF Tune. IMF Tune can perform all the filtering actions itself plus that it gives a lot more functionality. Hence the correct setup is that to disable Gateway filtering at the Exchange Content Filter/IMF and configure any of the Archive, Delete or Reject actions at the IMF Tune configuration.
The Exchange 2007/2010 Content Filter provides the Quarantine, Reject and Delete gateway blocking options. These may be replaced at IMF Tune by the Reroute, Reject and Delete Email Handling actions. Exchange 2003 IMF provides the Archive, Delete and Reject actions. At IMF Tune the same functionality is provided by configuring Archiving profiles and using the Email Handling Reject and Delete actions. Read Complete Article...
The Exchange 2003 Intelligent Message Filter has an Archiving Action. Where is this in IMF Tune? The Exchange 2003 Intelligent Message Filter Gateway Blocking includes an Archiving Action. This is effectively a Delete and Archive operation since archived emails are not delivered. IMF Tune does not list Archiving in its Action list but rather makes archiving always available independently of which action is performed. Thus archiving is possible whether you Accept, Reroute, Delete or Reject emails. For more details refer to: How do I get the same functionality from IMF Tune when disabling the Content Filter/IMF gateway blocking?
How do the Content Filter/IMF actions compare to IMF Tune actions? Firstly note that when using the Content Filter/IMF in combination with IMF Tune, the recommended setup is to disable Gateway filtering. For more details check: Why should I disable Gateway filtering actions at the Content Filter/IMF? For details on how to configure IMF Tune to achieve a direct equivalent configuration to Gateway filtering check: How do I get the same functionality from IMF Tune when disabling the Content Filter/IMF gateway blocking? IMF Tune provides additional functionality over the Gateway blocking provided by Exchange. This includes:
How does IMF Tune help me to reduce spam at source? Through the detailed logging information generated by IMF Tune it is possible to identify some common spam sources. For example the originating host IP can be useful in setting up IP blacklists. This information could also be processed through one of the many reporting tools available on the market. All of these typically support the CSV format generated by IMF Tune. Hence you should be able to import the data directly and then generate reports based on the capabilities of the tool used. In this case it is best to generate separate log files for the higher range of SCL values where the likeliness of false positives is minimal.
No. Emails rejected through Exchange filtering never reach IMF Tune.
IMF Tune will handle these as whitelisted. It will apply any email handling settings as configured for whitelisted emails.
IMF Tune couples tightly with the Exchange Content Filter/IMF. Hence which emails are processed or left unprocessed is determined by Exchange and not IMF Tune. By default the Content Filter/IMF won't process emails from an authenticated connection. Thus these are handled as unprocessed by IMF Tune. Another scenario giving rise to unprocessed emails is when the Content Filter/IMF is not enabled.
999 is the SCL value assigned by IMF Tune to blacklisted emails. At the moment the Exchange Content Filter/IMF does not define an SCL for blacklisting. Thus we had to invent one. We chose a value that is much larger than the largest defined SCL. For this reason, whenever choosing to expose the SCL value, 999 will be set in case of blacklisted emails.
With Whitelisting, Blacklisting and SCL Rules it is possible for a single email to give rise to multiple matches. IMF Tune follows a "play safe" rule. When multiple conditions match, the lowest SCL rating is applied. For example if an email contains a keyword located in a blacklist and a keyword located in a whitelist than the email is whitelisted. Extending this concept further, if an email matches an SCL Rule configured to set the SCL to 5 and also matches a keyword located in a blacklist, than the final SCL will be 5. SCL Rules applying 'increment by 'and 'decrement by' operations are considered to have the lowest priority. The increments and decrements are only computed if no other match is found that would set the email to a fixed SCL value. If computed, increments and decrements add up so that the final SCL value is the net result. So to recap, the final SCL rating is assigned based on these priority rules:
The IMF Tune machine receives emails relayed by another server. Can we still filter emails by IP? In this case you may want to consider setting up an SCL Rule for the RFC2822 Received header. For example consider the IP 127.0.0.2. Let's say you want all emails originating from this IP to be deposited to the Junk Email folder or to be blacklisted. In this case you can setup a mapping specifying that if the Received header contains 127.0.0.2 the SCL is set to 5. Here 5 is an SCL value for which emails are configured to be deposited to the Junk Email folder. For more details on how to setup IMF Tune refer to the FAQ How do I force an email to go to the Junk Email Folder? For more details on the RFC2822 Received header refer to: http://www.faqs.org/rfcs/rfc2822.html
These settings apply to functionality provided either by Exchange itself or by the Intelligent Message Filter. This is done to provide a centralized view of all settings relevant to anti-spam protection and to increase the awareness of the Exchange 2003 out-of-the-box anti-spam functionality. Thus any modifications should be done through the standard Exchange management console.
How do I contact technical support for questions not answered in this FAQ? Email to: support@windeveloper.com
How do I get an evaluation license? IMF Tune on first install runs in free 30day evaluation mode. Once evaluation is over it stops processing emails. At this point a license key must be supplied in order to restore full product functionality. You may obtain an extended evaluation period by contacting:
How do I choose the license type to order? When licensing IMF Tune the following information is required:
IMF Tune provides a number of license options based on the number of mailboxes being serviced. Currently license levels for 15, 30, 50, 100, 200, 500 and unlimited mailboxes are available. You need to choose a license that matches or exceeds the number of mailboxes serviced by your organization. Once the license type is identified, order one license for each machine where IMF Tune is to be installed. For example an organization servicing 150 mailboxes running IMF Tune on two servers would require 2 licenses for 200 mailboxes. Note that in general IMF Tune is only installed on the internet facing servers and not backend mailbox servers. However this depends on your network configuration. For help on choosing the correct license contact: sales@windeveloper.com
Are there any differences in features for licenses with different mailbox limits? No. The feature set is identical.
A license is only needed for the servers where IMF Tune is installed. Typically anti-spam protection is installed on the internet facing bridgeheads. Thus these would be the only servers requiring IMF Tune.
Is the online order processing secure? The secure ordering system uses SSL to encrypt your details so as to safeguard sensitive data such as the credit card number.
Is WinDeveloper IMF Tune subscription based? No. You just purchase the license and use it with no other payment obligations. You may choose to subscribe to a yearly maintenance agreement. However this is optional.
I evaluated IMF Tune in the past and would like to re-evaluate the latest version. Can you help? Contact sales@windeveloper.com they will be able to supply you with an evaluation license.
I want to evaluate IMF Tune, will I need to reinstall on licensing the product? No. The IMF Tune evaluation product is effectively the full product. All you need is to supply it with a license key and no reinstallation is required. For details on how to license the product refer to the User Manual.
How can support be extended beyond the first year? For a yearly fee you can extend product support. Extended support always starts from the date when the previous support contract expires. Support can only be renewed within 60 days of the previous support contract expiry. To extend support contact sales@windeveloper.com.
My last support contract expired. Am I still in time to renew it? Support should be renewed within 60 days from the expiry of the last support contract. If you purchased IMF Tune on 1st June 2006, support will expire on 1st June 2007. Following that you have up to 30th July 2007 to renew support.
How do I contact sales for questions not answered in this FAQ? Email to: sales@windeveloper.com
|