Exchange & Outlook UPDATE, Exchange Edition, June 24, 2004

Paul Robichaux runs the new Microsoft Exchange Intelligent Message Filter through its paces. Plus, get tips and information about Exchange, Outlook, and related products.

ITPro Today

June 23, 2004

10 Min Read
ITPro Today logo in a gray background | ITPro Today

===============

Ensure that your Exchange and Outlook UPDATE isn't mistakenly blocked by antispam software. Add [email protected] to your list of allowed senders and contacts.

==========

==========

1. Commentary
- Day-to-Day with IMF 2. Resources
- Featured Thread: Pseudo Front-End Servers
- Outlook Tip: Adding Elements to Outlook Signatures 3. New and Improved
- Organize Outlook Notes
- Tell Us About a Hot Product and Get a T-Shirt!

==========

~~~~ Sponsor: Neverfail ~~~~
Cluster-class Availability for Exchange – Without the Complexity or Cost of Traditional Clustering!
Has your business suffered a loss of communications at critical moments because your Exchange server was down? Neverfail for Exchange is a software solution that ensures true application availability. It's easy to install and use; offering cluster-class availability at a fraction of the cost and complexity of traditional clustering. To learn how Neverfail can help your business save IT dollars and resources access a free white paper or view a self-paced product demo:
http://list.winnetmag.com/cgi-bin3/DM/y/egSb0EAYC40CBg0BJPg0AC

==========

Editor's note: Share Your Exchange Discoveries and Get $100
Share your Exchange Server and Outlook discoveries, comments, or problems and solutions for use in the Exchange & Outlook Administrator print newsletter's Reader to Reader column. Email your contributions (500 words or less) to [email protected]. We edit submissions for style, grammar, and length. If we print your submission, you'll get $100.

==========

==== 1. Commentary: Day-to-Day with IMF ==== by Paul Robichaux, News Editor, [email protected] When Microsoft released the first version of the Microsoft Exchange Intelligent Message Filter (IMF), I installed it on two servers: my home server and my work server. Each server has about 20 users, and these users are fairly evenly divided between those who have used the same email address for years (like me) and those whose addresses are newer and thus less widely distributed. Some users on both servers liberally publicize their addresses, while others tightly guard them. Each server receives anywhere from 500 to 1000 legitimate messages and 200 to 400 spam messages per day. I was already using the excellent NetIQ MailMarshal SMTP to filter spam on both servers, so IMF didn't have much to do. Unfortunately, the old box I was using to run MailMarshal SMTP gave up the ghost this past week. Rather than rebuild it, I decided to let IMF have a crack at stopping the spam all by itself. To begin my test, I set the IMF gateway threshold to 6 and the store threshold to 8. (For more information about what these numbers mean and about IMF in general, see "Exchange Gets Filtered," November 2003, http://www.winnetmag.com/article/articleid/41121/41121.html .) These values are fairly permissive, but I was a little worried about throwing away legitimate email. I set the IMF mode to Archive. After a few hours, I didn't see any messages in the archive; then I remembered that you have to stop and restart the Store on the machine that's running IMF to get the software to notice mode changes. After I did that, spam started hitting the archive directory. So far, the results have been pretty good. Most of the users are using Outlook 2003, a few folks use Outlook Web Access (OWA) only, and a handful of others run Microsoft Entourage 2004 for Mac (which uses a junk mail filter based on the same code as IMF and the Outlook 2003 Junk E-mail Filter). After 5 days, the users--and I--have gotten only a handful of spam in our Inboxes. IMF hasn't flagged any legitimate messages as spam at the gateway and has misjudged only two legitimate messages at the store threshold. (I found both messages in my Junk Mail folder. Interestingly, one of them was a post to a security mailing list, and one was a mailing-list message from a microsoft.com address. Go figure.) IMF definitely lacks many of the features I've grown accustomed to in third-party antispam products, though. For example, the IMF interface in Exchange System Manager (ESM) doesn't provide any way to review archived messages. However, Daryl Maunder has written a Web-based tool, and James Webster of the Exchange team at Microsoft has written a GUI tool in C#. Both are useful; you can find links to them, and screenshots, at http://www.e2ksecurity.com/archives/000835.html . In addition, IMF requires you to use Performance Monitor to get statistical data about what's happening with messages, and you can't change the filter's rules. The software doesn't block attachments according to type, and it can't perform any kind of content-based inspection (e.g., quarantining inbound encrypted messages, selectively adding disclaimers from certain users). Still, IMF isn't intended to compete with third-party products. It's a simple, free spam filter meant to add one more level of protection--and it does a good job at that.

==========

~~~~ Sponsor: Windows & .NET Magazine ~~~~
Get 2 Sample Issues of Windows & .NET Magazine!
Every issue of Windows & .NET Magazine includes intelligent, impartial, and independent coverage of security, Active Directory, Exchange, scripting, and much more. Our expert authors deliver how-to articles and product evaluations that will help you do your job better. Try two, no-risk sample issues today, and find out why 100,000 IT professionals rely on Windows & .NET Magazine each month!
http://list.winnetmag.com/cgi-bin3/DM/y/egSb0EAYC40CBg0BEuX0AT

==========

==== Announcements ==== (from Windows & .NET Magazine and its partners) Now the Windows & .NET Magazine Network VIP Web Site/Super CD Really Does Have It All!
Our VIP Web site/Super CD subscribers are used to getting online access to all of our publications, plus a print subscription to Windows & .NET Magazine and exclusive access to our banner-free VIP Web site. But now we've added even more content from the archives of SQL Server Magazine! You won't find a more complete and comprehensive resource anywhere--check it out!
http://list.winnetmag.com/cgi-bin3/DM/y/egSb0EAYC40CBg0BJEb0Au Windows Connections October 24-27, Orlando, Florida
Save these dates for the Fall 2004 Windows Connections conference, which will run concurrently with Microsoft Exchange Connections. Register early and receive admission to both conferences for one low price. Learn firsthand from Microsoft product architects and the best third-party experts. Go online or call 800-505-1201 for more information.
http://list.winnetmag.com/cgi-bin3/DM/y/egSb0EAYC40CBg0KXQ0Ar Free eBook--"Preemptive Email Security and Management"
Chapter 2 is available now, "Evolving techniques for eliminating spam, email virus and worm threats." In this eBook, you'll discover a preventive approach to eliminating spam and viruses, stopping directory harvest attacks, guarding content, and improving email performance. Download this eBook today!
http://list.winnetmag.com/cgi-bin3/DM/y/egSb0EAYC40CBg0BJJe0A3

==========

~~~~ Hot Release: Dantz Development Corporation ~~~~
Download Dantz Development Corporation's "Building a Backup Strategy for SMBs" white paper. Examine the challenges SMBs face in protecting critical business data and learn about designing a reliable data protection strategy that is easy to implement and maintain.
http://list.winnetmag.com/cgi-bin3/DM/y/egSb0EAYC40CBg0BIs70Aw

==========

=========

~~~~ Contact Us ~~~~ About the newsletter -- [email protected]
About technical questions -- http://www.winnetmag.com/forums
About product news -- [email protected]
About your subscription -- [email protected]
About sponsoring UPDATE -- [email protected]

==========

~~~~ Contact Our Sponsors ~~~~ Primary Sponsor:
Neverfail -- http://us.neverfailgroup.com -- 1-512-327-5777 Hot Release:
Dantz Development Corporation -- http://www.dantz.com

=========================

This email newsletter is brought to you by Windows & .NET Magazine, the leading publication for IT professionals deploying Windows and related technologies. Subscribe today.
http://www.winnetmag.com/sub.cfm?code=wswi201x1z

View the Windows & .NET Magazine Privacy policy at http://www.winnetmag.com/AboutUs/Index.cfm?action=privacy Windows & .NET Magazine a division of Penton Media Inc. 221 East 29th Street, Loveland, CO 80538, Attention: Customer Service Department Copyright 2004, Penton Media, Inc. All Rights Reserved.

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like