Отвечено Edge 2007 - Free flowing spam...

Všechny reakce

  • 27. dubna 2012 8:35
    Moderátor
     
     Odpovědět
    I have my sender confidence set at 2 and this guy still gets spam.  Even more interestingly, one of the spam he sent to me is scl = 7.  Also, from what I understand, any blocked mail that is above the set threshold is supposed to show up in the block list.  Nothing there???

    Hi Diederich,

    When the Content Filter agent processes a message, it assigns a spam confidence level (SCL) rating to the message. The SCL rating is a number between 0 and 9. You can configurate Content Filter to Reject message >=7 directly: Content Filtering->Properties->Action

    Instead of relying on Sender Reputation to move suspicious sender to IP block list by SRL(sender confidence set at 2), you can add the sender to IP Block List & Sender Filtering to test.

    For more information about Sender Reputation, please see:

    http://technet.microsoft.com/en-us/library/bb124512(v=exchg.80).aspx

    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    Frank Wang

    TechNet Community Support

  • 27. dubna 2012 16:20
     
     Odpovědět

    The Sender Reputation Threshold and the SCL Thresholds are not the same thing.

    If you are receving emails with SCL=7 in your inbox, my guess is that the Content Filter is not properly configured. At least most users relying on the Content Filter are blocking emails with such a high SCL rating.

    I think you need to better understnad how the Content Filter works and this is a good starting point:

    Video - Getting Started with the Exchange 2007 Content Filter
    http://www.exchangeinbox.com/article.aspx?i=135

    The Exchange 2007 Content Filter Agent
    http://www.exchangeinbox.com/article.aspx?i=104


    IMF Tune - Anti-spam extending the Exchange 2003, 2007, 2010 IMF/Content Filter - http://www.windeveloper.com/imftune/

  • 2. května 2012 2:34
    Moderátor
     
     

    Hi Diederich,

    Any updates?


    Frank Wang

    TechNet Community Support