where spam go if Exchange IMF enabled

[guest]

Q: I have followed the below link to enable IMF on our Exchange 2003. I would like to know where the spams sent?

Exchange
How to configure connection filter on Exchange to block spam.
www.howtonetworking.com/server/exchange.htm

A: It depends. Under Gateway Blocking Configuration, in When blocking messages, you have different options if the SCL (spam confidence level) rating above the specified threshold.

1. Archive: will archive all messages marked as UCE with a rating above the specified threshold. Archived messages are saved to Exchsrvr\Mailroot\vsi n\UCEArchive, where n is the SMTP virtual server instance number. By default, the \Exchsrvr directory is created in the drive letter:\Program Files parent directory.
2. Delete: will delete all messages marked as UCE with a rating greater than the specified threshold. The message is accepted by Exchange Server and is then deleted. Neither the sender nor the intended recipient is notified that the message has been deleted.
3. No Action: will take no action on messages marked as UCE with a rating greater than the specified threshold. The message will be sent to the recipient and Store Junk E-mail Configuration to determine whether to deliver a message to a user's Inbox or the Junk E-mail folder.
4. Reject: will reject the message at the gateway. Exchange Server rejects the message during the SMTP session, and the connecting SMTP server is then responsible for delivering the non-delivery report to the sender.

[guest]

We are running Exchange 2003. We have GFI and also enabled Intelligent Message Filter. One of users keeps calling us to complain losing some emails. He has approved the emails are sent to our email address. We have searched all GFI junk mailbox, but can't find them.

I would like to know If the IMF is setup to No Action under Gateway Blocking Configuration in When blocking messages., the message will be sent to Outlook or different location.

[guest]

According to my experience, if we do not configure the Action in IMF, the
messages should be delivered to the Users' mailboxes

Regarding to the user's reported issue, I suggest we use message tracking
to check if the message was received or not received by the Exchange
server. The following are detailed steps:

===============

1. Start Exchange System Manager on the Exchange server

2. Navigate to the your Exchange server object. Right Click on the server
and choose properties On the General Tab, check the option "Enable Message
tracking"

If the option "Enable Message tracking" is already enabled, directly go to
step 3

Otherwise, we need to wait until the issue is reproduced and then go to
step 3

3. In the console tree, double-click Tools.

4. Click Message Tracking Center

5. Next to the Server button, type the name of the Exchange server. To
browse a list of available servers, click Server, select a server, and then
click OK.

6. Input the sender and recipient information and click Find now