WinDeveloper Software
Innovation. The seed to our Solutions
Follow us on Twitter WinDeveloper on Facebook WinDeveloper YouTube Channel WinDeveloper Updates
HomeDownloadOrderSupportPartnersCompanyContact
IMF Tune v7.1 - Bringing Back the Exchange Connection Filter
IMF Tune v7.1 - Bringing Back the Exchange Connection Filter
IMF Tune FAQs

Check the following frequently asked questions to quickly resolve/answer common questions.

Choose your question type:
Technical FAQs
Sales/Licensing FAQs

 

Technical FAQs

Sales/Licensing FAQs

Which Exchange versions/platforms does IMF Tune Support?

IMF Tune is installed on the Exchange server machine. Exchange versions 2003, 2007, 2010, 2013 and 2016 are supported. The following is the list of supported platform/Exchange server combinations:

Exchange 2003 SP2 - Windows 2003 (x86), SBS 2003 (x86)

Exchange 2007 - Windows 2003 (x64), Windows 2008/2008 R2 (x64), SBS 2008 (x64)

Exchange 2010 - Windows 2008/2008 R2 (x64), SBS 2011 (x64)

Exchange 2013 - Windows 2008 R2 (x64), Windows 2012/2012 R2 (x64)

Exchange 2016 - Windows 2012/2012 R2 (x64)

In Exchange 2007/2010 IMF Tune must be installed on the Edge or Hub transport server roles. The Exchange Content Filter or Forefront Protection 2010 for Exchange must also be installed.

In Exchange 2013/2016 IMF Tune must be installed on the Edge or Mailbox server roles. The Exchange Content Filter must also be installed.

 

back to index

How does IMF Tune help to quickly verify emails at the junk email folder?

IMF Tune enables the insertion of SCL ratings into the email subject. This is inserted as a prefix in the format (SCL: x). Thus at the junk email folder one can easily sort all emails by SCL rating. Since false positives are most likely to happen with the lowest SCL rating, sorting enables verification of these emails first. Read Complete Article...

 

back to index

How do I configure emails to be deposited to the junk email folder?

IMF Tune does not change anything in the way emails are moved to the junk email folder. Hence this is purely a matter of configuring the Exchange Content Filter/Intelligent Message Filter and the email clients. Read Complete Article...

 

back to index

Why aren't emails ending in the junk email folder?

For emails to be deposited to the junk email folder rather than the inbox you need to make sure that this functionality is enabled at the client mailbox. But before doing this make sure that the Content Filter/IMF is also correctly configured at the Exchange Server. See more details from: How do I configure emails to be deposited to the junk email folder?

If you already verified the Exchange Server settings, then check that the junk email folder is enabled at the client mailbox. This can be done through Outlook Web Access OWA. Other possible methods for enabling the Junk Email folder are available but depend on your Exchange Version. Read Complete Article...

 

back to index

How do I enable the Exchange IMF/Content Filter/Forefront Anti-Spam?

You need to make sure that the Exchange IMF/Content Filter or Forefront Protection 2010 for Exchange Anti-Spam is enabled for IMF Tune to work. Read Complete Article...

 

back to index

How do I force an email to go to the Junk Email Folder?

Typically you need to do this when spam still manages to reach the recipient Inbox. Read Complete Article...

 

back to index

How do I configure IMF Tune to only insert the SCL rating in emails ending in the junk email folder?

Read Complete Article...

 

back to index

How do I use IMF Tune to improve the SCL threshold configuration?

Optimizing SCL threshold configuration typically aims to

  • Minimizing the number of false positives/negatives

  • Ensuring that any false positives end up in the recipient junk email folder rather than being deleted or rejected.

To get the best out of IMF we need to monitor how a set of configuration settings is performing. IMF Tune helps in this task in the following ways:

  • Insertion of SCLs in the email subject and email headers exposes the SCL rating for individual emails. Thus one can immediately tell what the SCL rating was in case of a false result.

  • IMF Tune enables the setup of SCL based logging. This provides a CSV formatted file in which each email is listed together with its SCL rating and other key information. This simplifies looking up the list of emails processed and type of actions applied.

  • The IMF Tune Moderator/Reporting interface allows us to expose all inbound emails. This may include both emails blocked at the server and emails delivered to user mailboxes. In this manner it is easy for us to investigate emails assigned mid-range SCL ratings (i.e. the emails that are typically effected by an SCL fine tuning exercise).

 

back to index

How do I separate email archives/logs based on SCL ratings?

At IMF Tune create multiple Archive/Logging Profiles. One for each of the SCL ranges requiring independent logging/archiving. In this manner you can setup a unique log file/archive directory for each of the SCL ranges.

 

back to index

Why should I disable Gateway blocking at Exchange IMF/Content Filter/Forefront?

In IMF Tune, filtering is a two stage process. First we have the Exchange IMF/Content Filter/Forefront stage. Following that we have IMF Tune itself. Emails blocked at the first stage are not processed by IMF Tune.

IMF Tune can perform all the gateway blocking actions itself. Hence the correct setup is that to disable Gateway filtering at the Exchange IMF/Content Filter/Forefront and configure any of the Archive/Quarantine, Delete or Reject actions at the IMF Tune configuration.

 

back to index

Which IMF Tune actions replace the Exchange IMF/Content Filter/Forefront Gateway Blocking?

In Exchange 2007/2010/2013/2016 the Content Filter provides the Quarantine, Reject and Delete gateway blocking options. These may be replaced at IMF Tune by the Reroute, Reject and Delete Email Handling actions.

The Forefront Content Filter provides Quarantine, Reject and Delete gateway blocking. The Forefront Quarantine is a central store, accessible from the Forefront Management Console. These are replaced at IMF Tune using the Web Moderator/Reporting component and the Email Handling Reject and Delete actions.

Exchange 2003 IMF provides the Archive, Delete and Reject actions. At IMF Tune the same functionality is provided by configuring Archiving profiles and using the Email Handling Reject and Delete actions. Read Complete Article...

 

back to index

The Exchange 2003 Intelligent Message Filter has an Archiving Action. Where is this in IMF Tune?

The Exchange 2003 Intelligent Message Filter Gateway Blocking includes an Archiving Action. This is effectively a Delete and Archive operation since archived emails are not delivered.

IMF Tune does not list Archiving in its Action list but rather makes archiving always available independently of which action is performed. Thus archiving is possible whether you Accept, Reroute, Delete or Reject emails. For more details refer to: Which IMF Tune actions replace the Exchange IMF/Content Filter/Forefront Gateway Blocking?

 

back to index

How does IMF Tune help me to reduce spam at source?

Through the detailed logging information generated by IMF Tune it is possible to identify some common spam sources. For example the originating host IP can be useful in setting up IP blacklists.

This information could also be processed through one of the many reporting tools available on the market. All of these typically support the CSV format generated by IMF Tune. Hence you should be able to import the data directly and then generate reports based on the capabilities of the tool used.

In this case it is best to generate separate log files for the higher range of SCL values where the likeliness of false positives is minimal.

 

back to index

Does IMF Tune process emails rejected by Exchange Connection, Sender or Recipient filtering?

No. Emails rejected through Exchange filtering never reach IMF Tune.

 

back to index

I have IPs configured at the Exchange 2003 Connection Filtering IP Accept list. How will IMF Tune handle emails matching this list?

IMF Tune will handle these as whitelisted. It will apply any email handling settings as configured for whitelisted emails.

 

back to index

At IMF Tune I can configure email handling for "unprocessed" emails. Which emails fall in this category?

IMF Tune couples tightly with the Exchange Content Filter/IMF. Hence which emails are processed or left unprocessed is determined by Exchange and not IMF Tune.

By default the Content Filter/IMF won't process emails from an authenticated connection. Thus these are handled as unprocessed by IMF Tune.

Another scenario giving rise to unprocessed emails is when the Content Filter/IMF is not enabled.

 

back to index

What is SCL 999?

999 is the SCL value assigned by IMF Tune to blacklisted emails. At the moment the Exchange Content Filter/IMF does not define an SCL for blacklisting. Thus we had to invent one. We chose a value that is much larger than the largest defined SCL. For this reason, whenever choosing to expose the SCL value, 999 will be set in case of blacklisted emails.

 

back to index

I configured various Whitelists, Blacklists and SCL Rules. What happens if an email causes multiple matches?

With Whitelisting, Blacklisting and SCL Rules it is possible for a single email to give rise to multiple matches. IMF Tune follows a "play safe" rule, and the lowest SCL rating is applied. For example if an email contains both a blacklisted keyword and a whitelisted keyword, the email is whitelisted.

Extending this concept further, if an email matches an SCL Rule configured to set the SCL to 5 and also matches a blacklisted keyword, than the final SCL will be 5.

SCL Rules applying 'increment by 'and 'decrement by' operations are considered to have the lowest priority. The increments and decrements are only computed if no other match is found that would set the email to a fixed SCL value. If computed, increments and decrements add up so that the final SCL value is the net result.

So to recap, the final SCL rating is assigned based on these priority rules:

  1. Whitelisting has highest priority. An email may be whitelisted through:

    • IMF Tune Whitelists

    • SCL Rules

    • Exchange Whitelists (e.g. Connection Filtering IP Accept list)

  2. Next in priority are the SCL Rules having the lowest 'set value to' SCL value.

  3. Next in priority is Blacklisting. An email may be blacklisted through:

    • IMF Tune Blacklists

    • SCL Rules

  4. Lowest in priorities are the SCL Rules having an 'increment by' or 'decrement by' SCL operation.

 

back to index

The IMF Tune machine receives emails relayed by another internal server. Can we still filter emails by IP?

This issue is mostly of concern when running Exchange 2003.

In Exchange 2007/2010/2013/2016, we configure the perimeter IP address list from the shell with Set-TransportConfig, InternalSMTPServers property. In this case having the perimeter addresses correctly configured, both Exchange and IMF Tune are able to identify the last foreign host IP that routed the email.

In Exchange 2003 we can also configure the perimeter IPs at the System Manager. However IMF Tune does not support these settings. So in Exchange 2003, IMF Tune always ends up seeing the last IP. In our example this would be the internal relay server IP.

In this case you may want to consider setting up an SCL Rule for the RFC2822 Received header. For example consider the IP 127.0.0.2. Let's say you want all emails originating from this IP to be deposited to the Junk Email folder or to be blacklisted.

In this case you can setup a mapping specifying that if the Received header contains 127.0.0.2 the SCL is set to 5. Here 5 is an SCL value for which emails are configured to be deposited to the Junk Email folder.

For more details on how to setup IMF Tune refer to the FAQ How do I force an email to go to the Junk Email Folder?

For more details on the RFC2822 Received header refer to: http://www.faqs.org/rfcs/rfc2822.html

 

back to index

Why are the settings at the IMF Tune for Exchange 2003 configuration under the Exchange System Manager category read only?

These settings apply to functionality provided either by Exchange itself or by the Intelligent Message Filter. This is done to provide a centralized view of all settings relevant to anti-spam protection and to increase the awareness of the Exchange 2003 out-of-the-box anti-spam functionality. Thus any modifications should be done through the standard Exchange management console.

 

back to index

How do I enable SQL Authentication as required by the Quarantine Database?

The IMF Tune web interface requires a Microsoft SQL backend database. All MS SQL versions from 2005, 2008, 2012 and 2014 are supported, including the free MS SQL Express editions.

For the system to work IMF Tune requires an SQL Server that supports both Windows Authentication and SQL Authentication. This is sometimes referred to as mixed mode authentication. In case SQL Authentication is not enabled, IMF Tune will be unable to upload any emails to the database server. Complete Article...

 

back to index

How do I change the Date/Time format of the Web Moderator Interface?

The IMF Tune Moderator/Reporting Web Component displays date and time information in various parts of the interface. Different countries have differing methods for formatting such information. For example in US the short date format used is M/d/yyyy. In the UK the format dd/MM/yyyy is used instead.

The Web Component fixes the format to be used for displaying time information at installation time. This format may not be the one in use in your region. In that case, follow the procedure presented here to change it. Complete Article...

 

back to index

How do I contact technical support for questions not answered in this FAQ?

Email to: support@windeveloper.com

 

back to index

How do I get an evaluation license?

IMF Tune on first install runs in free 30day evaluation mode. Once evaluation is over it stops processing emails. At this point a license key must be supplied in order to restore full product functionality.

You may obtain an extended evaluation period by contacting:
sales@windeveloper.com

 

back to index

How do I choose the license type to order?

When licensing IMF Tune the following information is required:

  1. The number of mailboxes serviced by Exchange.
  2. The number of machines on which IMF Tune is to be installed.

IMF Tune provides a number of license options based on the number of mailboxes being serviced. Currently license levels for 15, 30, 50, 100, 200, 500 and unlimited mailboxes are available. You need to choose a license that matches or exceeds the number of mailboxes serviced by your organization.

Once the license type is identified, order one license for each machine where IMF Tune is to be installed. For example an organization servicing 150 mailboxes running IMF Tune on two servers would require 2 licenses for 200 mailboxes.

Note that in general IMF Tune is only installed on the internet facing servers and not backend mailbox servers. However this depends on your network configuration.

For help on choosing the correct license contact: sales@windeveloper.com

 

back to index

Are there any differences in features for licenses with different mailbox limits?

No. The feature set is identical.

 

back to index

Our Exchange organization is composed of a number of bridgehead and mailbox servers. Do I need a license for each of them?

A license is only needed for the servers where IMF Tune is installed. Typically anti-spam protection is installed on the internet facing bridgeheads. Thus these would be the only servers requiring IMF Tune.

 

back to index

Is the online order processing secure?

The secure ordering system uses SSL to encrypt your details so as to safeguard sensitive data such as the credit card number.

 

back to index

Is WinDeveloper IMF Tune subscription based?

No. You just purchase the license and use it with no other payment obligations. You may choose to subscribe to a yearly maintenance agreement. However this is optional.

 

back to index

I evaluated IMF Tune in the past and would like to re-evaluate the latest version. Can you help?

Contact sales@windeveloper.com they will be able to supply you with an evaluation license.

 

back to index

I want to evaluate IMF Tune, will I need to reinstall on licensing the product?

No. The IMF Tune evaluation product is effectively the full product. All you need is to supply it with a license key and no reinstallation is required. For details on how to license the product refer to the User Manual.

 

back to index

How can support be extended beyond the first year?

For a yearly fee you can extend product support. Extended support always starts from the date when the previous support contract expires. Support can only be renewed within 60 days of the previous support contract expiry. To extend support contact sales@windeveloper.com.

 

back to index

My last support contract expired. Am I still in time to renew it?

Support should be renewed within 60 days from the expiry of the last support contract. If you purchased IMF Tune on 1st June 2006, support will expire on 1st June 2007. Following that you have up to 30th July 2007 to renew support.

 

back to index

How do I contact sales for questions not answered in this FAQ?

Email to: sales@windeveloper.com

 

back to index

 

Copyright © 2004 - 2017 WinDeveloper Software Ltd. All rights reserved.