How to Use Microsoft Exchange Custom Weighting to Block More UCE
[Today's post comes to us courtesy of Rod White]
Lately, SBS customers have been reporting receiving a large amount unsolicited commercial e-mail (UCE) within Outlook referencing e-cards, greeting card, and postcard from family, friends and mates. Today's post will cover using a Exchange IMFv2 feature called Custom Weighting that allows filtering on words or phases within the Subject, Body, or Both. Below are the steps to enable the feature within Exchange 2003 with Service Pack 2 IMFv2:
Open Exchange System Manager and expand Global Settings. Right-click on Message Delivery and select Properties.
Select the Intelligent Message Filtering Tab. Select the SCL levels for the “Gateway Blocking Configuration” and “Store Junk E-mail Configuration”. Also select what you would like to happen with the mail option: Archive, Delete, No Action, Reject.
If the Archive Option is selected you will find the archive mail in the following location: C:\Program Files\Exchsrvr\Mailroot\vsi 1\UceArchiveTo learn more about the SCL settings look at the following document. Microsoft Exchange Server Intelligent Message Filter v2 Operations Guide: https://www.microsoft.com/downloads/details.aspx?familyid=B1218D8C-E8B3-48FB-9208-6F75707870C2&displaylang=en
Within Exchange System Manager expand Servers>Servername>Protocols>SMTP> Default SMTP Virtual Server. Highlight SMTP Virtual Server and right-click and select properties.
General Tab selected click the advanced button. Highlight the All Unassigned and edit.
Now that we have IMF filters enabled and properly configured let’s look at the Script on the server for Customweight Entry.
Save the file as MSExchange.UceContentFilter.xml Save the file in the C:\Program Files\Exchsrvr\bin\MSCFV2 directory. The MSExchange.UceContentFilter.xml file MUST be saved as UNICODE.
This is a very important step if the file is not saved a Unicode it will NOT work.
Register the Msexchange.UceContentFilter.dll file on the server from a command prompt using the following command "regsvr32 c:\program files\exchsrvr\bin\mscfv2\msexchange.UceContentFilter.dll"
Once you get the dll registered successfully restart the SMTP service.
Test email to see if the IMF filters the message. This can be done by enabling Message Tracking within exchange and looking to see if the message is (1) in the UceArchive directory or (2) within message tracking.
Comments
Anonymous
January 01, 2003
The Official SBS Blog : How to Use Microsoft Exchange Custom Weighting to Block More UCE: http://blogsAnonymous
January 01, 2003
The Official SBS Blog : How to Use Microsoft Exchange Custom Weighting to Block More UCE: http://blogsAnonymous
January 01, 2003
The comment has been removedAnonymous
May 02, 2008
The comment has been removedAnonymous
May 02, 2008
Where do I find, on my server, the script mentioned in Step 6?Anonymous
May 02, 2008
You actually need to place the file in the most recent "update" subfolder, otherwise it is not picked up when the SMTP service starts. And, unfortunately you need to manually move this file EACH time you install a IMF update (up to twice a month).
From Technet (http://technet.microsoft.com/en-us/library/aa998975(EXCHG.65).aspx): ...After the Intelligent Message Filter updates, you have to manually copy the following Custom Weight List file to the subfolder of the MSCFV2 folder that was created during the update: MSExchange.UceContentFilter.xml. The subfolder of the MSCFV2 folder contains the updated filter.
- Anonymous
December 02, 2015
The comment has been removed