RE: IMF removal
- From: "Mark Fugatt" <markfu@xxxxxxxxxxxxx>
- To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
- Date: Wed, 28 Dec 2005 17:50:50 -0000
From the IMF Deployment guide:
Changing the Archive Location
The archive location is the directory where Intelligent Message Filter
saves filtered messages when you choose to archive messages marked as
UCE that have a rating above the specified gateway threshold configured
on the Connection Filtering tab in Message Delivery Properties. By
default, messages are archived in \Exchsrvr\mailroot\vsi n\UCEArchive
where n is the SMTP virtual server instance number. By default the
\Exchsrvr directory is created in the <drive letter>:\Program Files
parent directory.
To Change the location of the archive directory
1. In Registry Editor (regedit), in the details pane, right-click
ContentFilter, click New, and then click String value.
1. Type ArchiveDir for the registry key value.
2. Right-click ArchiveDir, and then click Modify.
3. In Edit String, under Value Data, enter the full directory
path where you want to archive messages filtered by Intelligent Message
Filter. For example, type C:\Archive.
Mark Fugatt
Dedicated Supportability Engineer (Exchange)
Microsoft Limited
Desk: +44 (0)118 909 5630
Mobile: +44 (0)7966 858108
MSN IM: markfu@xxxxxxxxxxxxxxxxx
Blog: http://blogs.technet.com/mfugatt
Dedicated to proactively supporting Microsoft's enterprise Customers
________________________________
From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx]
Sent: 28 December 2005 17:40
To: [ExchangeList]
Subject: [exchangelist] RE: IMF removal
http://www.MSExchange.org/
Were do the archives get placed on the server? Thanks
Regards,
Andrew
________________________________
From: Mark Fugatt
Sent: Wed 12/28/2005 12:12 PM
To: [ExchangeList]
Subject: [exchangelist] RE: IMF removal
http://www.MSExchange.org/
OK, so now you need to juggle around a bit with it, I would start by
setting it to 7 on the Gateway and 6 on the Store, and then have it
archive the Gateway messages, you can then use some like this to look at
the archived messages and see if they are really spam:
http://www.gotdotnet.com/workspaces/workspace.aspx?id=e8728572-3a4e-425a
-9b26-a3fda0d06fee
Mark Fugatt
Dedicated Supportability Engineer (Exchange)
Microsoft Limited
Desk: +44 (0)118 909 5630
Mobile: +44 (0)7966 858108
MSN IM: markfu@xxxxxxxxxxxxxxxxx
Blog <mailto:markfu@xxxxxxxxxxxxxxxxx%0bBlog> :
http://blogs.technet.com/mfugatt
Dedicated to proactively supporting Microsoft's enterprise Customers
________________________________
From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx]
Sent: 28 December 2005 17:01
To: [ExchangeList]
Subject: [exchangelist] RE: IMF removal
http://www.MSExchange.org/
Okay I ran the perform monitor at a clients that is using IMF. I used
the info from http://www.techgalaxy.net/blog/20041203214445.html to set
it up and got the results listed below:
MSExchange Intelligent Message Filter
% UCE of Messages Scanned in the previous 30 minutes - 83
% UCE out of Total Messages Scanned - 73.583
Messages Scanned for UCE/sec - 0.000
Total Messages Assigned an SCL Rating of 0 - 236
Total Messages Assigned an SCL Rating of 1 - 51
Total Messages Assigned an SCL Rating of 2 - 21
Total Messages Assigned an SCL Rating of 3 - 22
Total Messages Assigned an SCL Rating of 4 - 29
Total Messages Assigned an SCL Rating of 5 - 104
Total Messages Assigned an SCL Rating of 6 - 64
Total Messages Assigned an SCL Rating of 7 - 359
Total Messages Assigned an SCL Rating of 8 - 719
Total Messages Assigned an SCL Rating of 9 - 157
Total Messages Scanned for UCE - 1765
Total UCE Messages Acted Upon - 1298
UCE Messages Acted Upon/sec - 0.000
Regards,
Andrew
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange
<http://www.webelists.com/cgi/lyris.pl?enter=exchangelist%0bExchange>
Newsletters: http://www.msexchange.org/pages/newsletter.asp
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You
<http://www.techgenix.com%0b--------------------------------------------
----------%0byou/> are currently subscribed to this MSExchange.org
Discussion List as: markfu@xxxxxxxxxxxxx
To <mailto:markfu@xxxxxxxxxxxxx%0bTo> unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report
<http://www.webelists.com/cgi/lyris.pl?enter=exchangelist%0bReport>
abuse to info@xxxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange
<http://www.webelists.com/cgi/lyris.pl?enter=exchangelist%0bExchange>
Newsletters: http://www.msexchange.org/pages/newsletter.asp
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You
<http://www.techgenix.com%0b--------------------------------------------
----------%0bYou> are currently subscribed to this MSExchange.org
Discussion List as: andrew@xxxxxxxxxxxxxxxxxxxxxx
To <mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx%0bTo> unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report
<http://www.webelists.com/cgi/lyris.pl?enter=exchangelist%0bReport>
abuse to info@xxxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange
<http://www.webelists.com/cgi/lyris.pl?enter=exchangelist%0bExchange>
Newsletters: http://www.msexchange.org/pages/newsletter.asp
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You
<http://www.techgenix.com%0b--------------------------------------------
----------%0bYou> are currently subscribed to this MSExchange.org
Discussion List as: markfu@xxxxxxxxxxxxx
To <mailto:markfu@xxxxxxxxxxxxx%0bTo> unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report
<http://www.webelists.com/cgi/lyris.pl?enter=exchangelist%0bReport>
abuse to info@xxxxxxxxxxxxxx
Other related posts:
