Home > Microsoft Exchange Tips > Exchange Security Tips > Understanding Exchange Server IMF's 3 MB message limit
Exchange Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

EXCHANGE SECURITY TIPS

Understanding Exchange Server IMF's 3 MB message limit


Serdar Yegulalp
09.20.2006
Rating: --- (out of 5)


Exchange Server tips, tutorials and expert advice
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


Many Exchange Server administrators rely on the Intelligent Message Filter (IMF) as an easy and immediately available first line of defense against spam. IMF isn't as tunable as many third-party antispam products (although it can be enhanced with third-party IMF add-ons). That can be a benefit though, because it means much less work. However, you do make a certain tradeoff in functionality.

Exchange IMF, by default, will not scan email messages that are larger than 3 MB. If Exchange IMF runs into a message that's more than 3 MB, it'll log an Event 7515 error in the Application log with the following text:

An error occurred while Microsoft Exchange Intelligent Message Filter attempted to filter a message with ID ####, #### From smtp: #### and Subject ####. This message will not be filtered. The error code is 0x800710f0.

NOTE: The text designated by the hash marks will be different for each message, and should help you figure out which messages are being ignored.

As it turns out, Exchange IMF is designed not to scan messages more than 3 MB. There are several reasons for this:

  • Messages 3 MB and over are very rarely spam or unwanted email. The cost involved in sending such large messages on a bulk scale is prohibitive, so most spam tends to be relatively small.
  • It takes a certain amount of CPU and memory to scan each message, so not scanning messages larger than 3 MB will save processing power.
  • Most organizations have restrictions in place on incoming messages. Anything larger than 2 MB shouldn't be allowed on principle, since it eats both bandwidth and storage.
  • While it's entirely possible that a message of that size contains a virus, most email viruses aren't usually that big -- and trapping viruses is not really Exchange IMF's job (and shouldn't be).

About the author: Serdar Yegulalp is editor of the Windows Power Users Newsletter.

Do you have comments on this tip? Let us know.

Related information from SearchExchange.com:

  • Crash Course: Exchange Intelligent Message Filter
  • Fast Guide: Exchange Server security essentials
  • Learning Guide: How to fight spam on Exchange Server
  • Tip: Troubleshooting Exchange Server error messages
  • Reference Center: Spam prevention and management tips

    Please let others know how useful this tip was via the rating scale below. Do you have a useful Exchange Server or Microsoft Outlook tip, timesaver or workaround to share? Submit it to SearchExchange.com. If we publish it, we'll send you a nifty thank-you gift.

    Rate this Tip
    To rate tips, you must be a member of SearchExchange.com.
    Register now to start rating these tips. Log in if you are already a member.


    Submit a Tip




    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google



    RELATED CONTENT
    Exchange Security Tips
    Is full email encryption the solution to Exchange security?
    Lock down direct file access and protect OWA users
    Controlling spam in Exchange 2007 at the edge transport server level
    When to use a self-signed certificate with Exchange Server 2007
    Obtaining and verifying SSL certificates in Exchange Server
    How file-level antivirus software can harm your Exchange Server
    Understanding Exchange Server 2007 SP1 mobile security settings
    Which ActiveSync authentication method is best for your mobile device?
    Why you should secure Exchange 2007 using administrative policies
    Microsoft Exchange Server security dos and don'ts

    Spam and virus protection
    Controlling spam in Exchange 2007 at the edge transport server level
    How file-level antivirus software can harm your Exchange Server
    Problems with email spoofing on SBS 2003
    Exchange Insider e-zine
    Securing your Exchange Server 2007 journaling archives
    Troubleshooting Outlook Web Access issues on a 64-bit system
    Microsoft Exchange Server security dos and don'ts
    Troubleshooting Microsoft Exchange Server Event ID error 6009
    How effective is tracking the IP address of an email hacker?
    How can I configure Exchange IMF to allow an IP address or DNS?
    Spam and virus protection Research

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    greylist  (SearchExchange.com)
    hash buster  (SearchExchange.com)
    image spam  (SearchExchange.com)
    KnujOn  (SearchExchange.com)
    Sender ID  (SearchExchange.com)
    spam confidence level  (SearchExchange.com)
    spamblock  (SearchExchange.com)
    spim  (SearchExchange.com)
    tarpitting  (SearchExchange.com)
    teergrube  (SearchExchange.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary

    DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.



  • Email Server Solutions: Exchange 2007, Exchange 2003, Exchange 2000, SharePoint
    HomeNewsTopicsITKnowledge ExchangeTipsAsk the ExpertsMultimediaWhite PapersIT Downloads
    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    SEARCH 
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2004 - 2009, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts