Export (0) Print
Expand All

How to Create an Intelligent Message Filter

 

Topic Last Modified: 2007-01-22

The following procedure outlines how to create an intelligent message filter. You need to do this before you enable intelligent message filtering on a virtual server.

  1. Start System Manager: On the Start menu, point to Programs, point to Microsoft Exchange, and then click System Manager.

  2. Double-click Global Settings.

  3. Right-click Message Delivery, and then click Properties.

  4. Click the Intelligent Message Filtering tab.

  5. Under Gateway Blocking Configuration, in Block messages with an SCL rating greater than or equal to, select a number to set the threshold for the action taken at the gateway on messages. Use the following criteria and your specific organizational requirements to set your gateway threshold:

    • Selecting a lower number for the SCL rating blocks more messages that could be UCE, but it also increases the likelihood of false positives, which are legitimate messages that Intelligent Message Filter marks as UCE. Some organizations find it acceptable to block a percentage of legitimate e-mail messages to significantly reduce the amount of UCE delivered to their users. If this is the case in your organization, select a lower number for the SCL rating threshold.

    • Selecting a higher number for the SCL rating blocks fewer messages that could be UCE, but it reduces the likelihood of false positives. Many organizations would rather handle more UCE than risk legitimate e-mail messages being blocked. If this is the case in your organization, select a higher number for the SCL rating threshold.

  6. Under Gateway Blocking Configuration, in When blocking messages, select the action that you want Intelligent Message Filter to take when it assigns a message an SCL rating above the specified threshold. The following options are available for selection:

    • Select Archive to archive all messages marked as UCE with a rating above the specified threshold. Archived messages are saved to the archive directory. This directory is in the root directory of the Queue directory specified on the Messages tab of the SMTP virtual server properties. By default, the archive directory is Exchsrvr\Mailroot\vsi n\UCEArchive, where n is the SMTP virtual server instance number. By default, the \Exchsrvr directory is created in the drive letter:\Program Files parent directory. You can review messages in the archive directory by opening them in Notepad or using Microsoft Outlook Express. If you discover a legitimate e-mail message that has been archived, you can resubmit the message by putting it in the Exchsrvr\Mailroot\vsi n\pickup directory. The SMTP service will then deliver the e-mail message to the appropriate mailbox.

    • Select Delete to delete all messages marked as UCE with a rating greater than the specified threshold. The message is accepted by Exchange Server and is then deleted. Neither the sender nor the intended recipient is notified that the message has been deleted.

    • Select No Action to take no action on messages marked as UCE with a rating greater than the specified threshold. This UCE rating is saved with the other message properties and these properties are sent with the message to other Exchange servers. Exchange mailbox servers use the UCE rating and the settings specified in Store Junk E-mail Configuration to determine whether to deliver a message to a user's Inbox or the Junk E-mail folder.

    • Select Reject to reject the message at the gateway. Exchange Server rejects the message during the SMTP session, and the connecting SMTP server is then responsible for delivering the non-delivery report to the sender.

  7. Under Store Junk E-mail Configuration, in Move messages with an SCL rating greater than or equal to, specify the threshold above which incoming messages are moved to a user's Junk E-mail folder, unless the sender appears on a user's safe senders list. These settings work similar to the settings in Gateway Blocking Configuration. Select a threshold above which an Exchange Server mailbox store moves messages to a user's Junk E-mail folder based on the following criteria:

    • Selecting a lower number for the SCL rating reduces the amount of UCE delivered to a user's Inbox, but it also increases the probability of false positives being moved to a user's Junk E-mail folder. Therefore, legitimate e-mail messages can unintentionally be moved to the user's Junk E-mail folder when you select a setting to move more UCE.

    • Selecting a higher number for the SCL rating increases the amount of UCE delivered to a user's Inbox, but it also decreases the likelihood of false positives being delivered to a user's Junk E-mail folder.

 
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

ADD
Show:
© 2014 Microsoft