Home > Microsoft Exchange Tips > Exchange Security Tips > Exchange Intelligent Message Filter's custom weighting feature
Exchange Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

EXCHANGE SECURITY TIPS

Exchange Intelligent Message Filter's custom weighting feature


Serdar Yegulalp
03.21.2007
Rating: --- (out of 5)


Exchange Server tips, tutorials and expert advice
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


Almost every third-party spam-filtering product offers some kind of custom whitelisting feature that designates a message as legitimate if specific words or phrases appear in the email body or subject line.

For instance, when I email an editor I write for, I often use the header "EDIT:" (short for "Editorial") in the subject line. That particular header acts a whitelist trigger that ensures that my messages will be automatically accepted by the receiving mail server.

What you may not realize is that Exchange Server 2003 Pack 2 (SP2) and the Exchange Intelligent Message Filter (IMF) provide the same functionality through their custom weighting feature.

There is a catch though. There is no user interface for it, so you have to write a configuration file (standard XML) by hand and drop it into the same directory as the MSExchange.UceContentFilter.dll file.

Here's an example of the file to be used (as it is outlined in Microsoft's documentation for Exchange 2003 SP2; do an Edit -> Find for the "Custom Weighting Feature" section):

<?xml version="1.0" encoding="UTF-16"?>
<CustomWeightEntries xmlns=http://schemas.microsoft.com/2005/
CustomWeight>
     <CustomWeightEntry Type="BODY" Change="1" Text="foo1"/>
     <CustomWeightEntry Type="BODY" Change="-1" Text="foo2"/>
     <CustomWeightEntry Type="BODY" Change="5" Text=
"Special offer"/>
     <CustomWeightEntry Type="BODY" Change="-9" Text=
"Verlängertes Angebot"/>
     <CustomWeightEntry Type="SUBJECT" Change="MIN" 
Text="特別提供"/>
     <CustomWeightEntry Type="BOTH" Change="MAX" Text=
"Offre spéciale"/>
</CustomWeightEntries>

Each of the CustomWeightEntry entries has the following values:

  • Text: A Unicode string that describes the text to apply a custom weight to.

  • Type: Describes whether the matching text is found in the BODY of the message, the SUBJECT, or BOTH.

  • Change: How much to change the Spam Confidence Level (SCL) score of a message that matches the text. This is an integer from -9 to 9. It's not the SCL itself, but how much the SCL of the message will change.

    You can also use MIN and MAX as shorthand ways to set the SCL to the minimum and maximum allowed values, respectively. (If a given message matches more than one keyword -- one with a MIN value and another with a MAX value -- the SCL is set to zero.)

Note that the XML file must be saved as a UTF-16 file. Also, if it's broken or malformed, Exchange IMF will not load. So you may want to either use the above example as a template or use an XML authoring tool to make sure it's correctly formatted.

About the author: Serdar Yegulalp is editor of Windows Insight, a newsletter devoted to hints, tips, tricks, news and goodies for all flavors of Windows users.

Do you have comments on this tip? Let us know.

Related information from SearchExchange.com:

  • Tip: Microsoft hotfix offers selective Exchange IMF filtering
  • Tip: Freeware 'greylisting' for Exchange Server
  • Tip: Managing the Exchange IMF archive directory
  • Crash Course: Exchange Intelligent Message Filter
  • Learning Guide: How to fight spam on Exchange Server
  • Reference Center: Spam prevention and management resources

    Please let others know how useful this tip was via the rating scale below. Do you have a useful Exchange Server or Microsoft Outlook tip, timesaver or workaround to share? Submit it to SearchExchange.com. If we publish it, we'll send you a thank-you gift only an IT geek could love.

    Rate this Tip
    To rate tips, you must be a member of SearchExchange.com.
    Register now to start rating these tips. Log in if you are already a member.




    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google



    RELATED CONTENT
    Spam and virus protection
    Controlling spam in Exchange 2007 at the edge transport server level
    How file-level antivirus software can harm your Exchange Server
    Problems with email spoofing on SBS 2003
    Exchange Insider e-zine
    Securing your Exchange Server 2007 journaling archives
    Troubleshooting Outlook Web Access issues on a 64-bit system
    Microsoft Exchange Server security dos and don'ts
    Troubleshooting Microsoft Exchange Server Event ID error 6009
    How effective is tracking the IP address of an email hacker?
    How can I configure Exchange IMF to allow an IP address or DNS?
    Spam and virus protection Research

    Microsoft Exchange Server 2003
    Remove Exchange 2003 objects from AD to install Exchange 2010
    Leapfrogging from Exchange 2003 to Exchange 2010
    Top 5 Exchange ActiveSync tips
    Exchange Mailbag: POP3 settings and Outlook issues
    Migrating to Exchange 2007 with correct permissions
    Problems receiving email from outside a Exchange Server 2003 domain
    Exchange admins: Is it time to rethink your email address policy?
    Exchange Server 2003 collects email from only specific POP3 domains
    Changing email address formats in Exchange Server 2003
    Should you remove .STM files from Exchange Server 2003?
    Microsoft Exchange Server 2003 Research

    Microsoft Exchange Server Administration Tools
    An introduction to the Exchange Remote Connectivity Analyzer tool
    Prevent Microsoft Outlook 2007 from hanging when forwarding email
    Testing Unified Messaging connectivity in Exchange 2007
    Microsoft Exchange Server 2007 performance tutorial
    How to custom-configure a Microsoft Outlook 2007 install using OCT
    Top Exchange Server performance monitoring and troubleshooting tools
    Search and index Microsoft Outlook 2007 public folders
    Executing an .MSP customization file in Microsoft Outlook 2007
    Using the NTBackup tool for Exchange Server backup and recovery
    Tools to bulk modify Active Directory users in Exchange Server 2003
    Microsoft Exchange Server Administration Tools Research

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    greylist  (SearchExchange.com)
    hash buster  (SearchExchange.com)
    image spam  (SearchExchange.com)
    KnujOn  (SearchExchange.com)
    Sender ID  (SearchExchange.com)
    spam confidence level  (SearchExchange.com)
    spamblock  (SearchExchange.com)
    spim  (SearchExchange.com)
    tarpitting  (SearchExchange.com)
    teergrube  (SearchExchange.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary

    DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.



  • Email Server Solutions: Exchange 2007, Exchange 2003, Exchange 2000, SharePoint
    HomeNewsTopicsITKnowledge ExchangeTipsAsk the ExpertsMultimediaWhite PapersIT Downloads
    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    SEARCH 
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2004 - 2009, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts