Hi Jim, Found it out already. But thanks anyway. Seems that the message screener is not that good anyway. I've already decided to install a spam control on a Linux based station. So I don't have to bother about costly software. Danny -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Thursday, July 17, 2003 15:15 To: [ISAserver.org Discussion List] Subject: [isalist] Re: message screener problem http://www.ISAserver.org Are the mails in HTML-format? If so, the message screener will not be able to scan them. Also, many spam-mails break up words with invalid or commetn HTML tags. This is done to skirt basic text-matching filters, like the message screener. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! http://www.ISAserver.org Hi all, I've installed the message screener on a smtp server. Setup was done according to one of the articles on the isaserver.org site. However, it seems now that the screener is just checking the subject and not the body. example: there is a rule that checks for "Generic Viagra" in header or body. If I send 2 test mails, one with these words in the subject and one in the body, the mail with the words in the subject is caught, not the one with the words in the body. My setup: ISA + SP1 + FP1 on Win2k SP3 (+all hotfixes) SMTP (IIS5) on Win2k SP3 (+all hotfixes) + message screener Anybody any id? Danny ------------------------------------------------------------------------ LEGAL DISCLAIMER: The information included in this message is personal and/or confidential and intended exclusively for the addressees as stated. This message and/or the accompanying documents may contain confidential information and should be handled accordingly. If you are not the intended reader of this message, we urgently request that you notify Centric KSI immediately and that you delete this e-mail and any copies of it from your system and destroy any printouts immediately. It is forbidden to distribute, reproduce, use or disclose the information in this e-mail to third parties without obtaining prior permission from Centric KSI. We expressly point out that there are risks associated with the use of e-mail like data corruption, interception, unauthorised amendment, viruses and unforeseen delays. Centric KSI and the companies within the group shall not accept any liability whatsoever for damage resulting from the use of e-mail. Legally binding obligations can only arise for Centric KSI by means of a written instrument, signed by an authorized representative of Centric KSI. ------------------------------------------------------------------------ ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: d.vanvelthoven@xxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------------------------ LEGAL DISCLAIMER: The information included in this message is personal and/or confidential and intended exclusively for the addressees as stated. This message and/or the accompanying documents may contain confidential information and should be handled accordingly. If you are not the intended reader of this message, we urgently request that you notify Centric KSI immediately and that you delete this e-mail and any copies of it from your system and destroy any printouts immediately. It is forbidden to distribute, reproduce, use or disclose the information in this e-mail to third parties without obtaining prior permission from Centric KSI. We expressly point out that there are risks associated with the use of e-mail like data corruption, interception, unauthorised amendment, viruses and unforeseen delays. Centric KSI and the companies within the group shall not accept any liability whatsoever for damage resulting from the use of e-mail. Legally binding obligations can only arise for Centric KSI by means of a written instrument, signed by an authorized representative of Centric KSI. ------------------------------------------------------------------------