OK, so now you need to juggle around a bit with it, I would start by setting it to 7 on the Gateway and 6 on the Store, and then have it archive the Gateway messages, you can then use some like this to look at the archived messages and see if they are really spam: http://www.gotdotnet.com/workspaces/workspace.aspx?id=e8728572-3a4e-425a -9b26-a3fda0d06fee Mark Fugatt Dedicated Supportability Engineer (Exchange) Microsoft Limited Desk: +44 (0)118 909 5630 Mobile: +44 (0)7966 858108 MSN IM: markfu@xxxxxxxxxxxxxxxxx Blog: http://blogs.technet.com/mfugatt Dedicated to proactively supporting Microsoft's enterprise Customers ________________________________ From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx] Sent: 28 December 2005 17:01 To: [ExchangeList] Subject: [exchangelist] RE: IMF removal http://www.MSExchange.org/ Okay I ran the perform monitor at a clients that is using IMF. I used the info from http://www.techgalaxy.net/blog/20041203214445.html to set it up and got the results listed below: MSExchange Intelligent Message Filter % UCE of Messages Scanned in the previous 30 minutes - 83 % UCE out of Total Messages Scanned - 73.583 Messages Scanned for UCE/sec - 0.000 Total Messages Assigned an SCL Rating of 0 - 236 Total Messages Assigned an SCL Rating of 1 - 51 Total Messages Assigned an SCL Rating of 2 - 21 Total Messages Assigned an SCL Rating of 3 - 22 Total Messages Assigned an SCL Rating of 4 - 29 Total Messages Assigned an SCL Rating of 5 - 104 Total Messages Assigned an SCL Rating of 6 - 64 Total Messages Assigned an SCL Rating of 7 - 359 Total Messages Assigned an SCL Rating of 8 - 719 Total Messages Assigned an SCL Rating of 9 - 157 Total Messages Scanned for UCE - 1765 Total UCE Messages Acted Upon - 1298 UCE Messages Acted Upon/sec - 0.000 Regards, Andrew ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange <http://www.webelists.com/cgi/lyris.pl?enter=exchangelist%0bExchange> Newsletters: http://www.msexchange.org/pages/newsletter.asp ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You <http://www.techgenix.com%0b-------------------------------------------- ----------%0bYou> are currently subscribed to this MSExchange.org Discussion List as: markfu@xxxxxxxxxxxxx To <mailto:markfu@xxxxxxxxxxxxx%0bTo> unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Report <http://www.webelists.com/cgi/lyris.pl?enter=exchangelist%0bReport> abuse to info@xxxxxxxxxxxxxx