Question : Exchange IMF and SPAM

SBS 2003, Exchange 2003 -- We finally got around to installing Exchange SP2 and enabling the IMF.   We've adjusted the UCE/junk rating numbers up and down to what seems to be the best value to block most of the junk but let thru the real mail. It's blocking about 1200 junk messages a day... Big relief to our 10 users.

However, several hundred message a day that look like the following still get thru. A few get blocked, but most don't.   Any idea how to stop these without stopping the real mail ?

From: ><>IL 1CE30;B5@C 0;>38 [mailto:[email protected].ua]
Sent: Friday, August 21, 2009 2:13 PM
To: user
Subject: 0;>3 =0 ?@81K;L, ! 8 =0;>3 =0 8: =>20F88 20093.
0;>3 =0 ?@81K;L, ! 8 =0;>3 =0 8: =>20F88 20093.
20dF0BL HecB>3> 0v3ycB0 2009 3.
(495) 742 9I 98,(495) ''5-'/95
;L30 # - :. M. =., 0C48B>@, ?@>D5AA8>=0;L=K9 1CE30;B5@, 3;02=K9 0C48B>@ 0C48B>@A:>9 D8@@ :=838 "71C:0 1CE30;B5@0. B 020=A0 4> 10;0=A0".
0;>3 =0 ?@81K;L
1.      7<5=5=8O 3;02K 25   $, 2ABC?82H85 2 A8;C A 2009 3>40 (70:>=K >B 22.07.2008 3. g 158-$ 8 >B 26.11.2008 3. g 224-$):
o      AB02:8 =0;>30 =0 ?@81K;L;
o      AB@0E>20=85 @01>B=8:>2;
o      =>20O 0<>@B870F8>==0O ?>;8B8:0;
o      =>2K9 ?>@O4>: =>@<8@>20=8O @0AE>4>2 2 2845 ?@>F5=B>2 ?> :@548B0<;
o      2K?;0BK G;5=0< A>25B0 48@5:B>@>2;
o      :><0=48@>2:8;
o      @0AE>4K =0 >1CG5=85 @01>B=8:>2;
o      ?>@O4>: ?@87=0=8O C1KB:0 ?@8 @50;870F88 8o      ?>@O4>: C?;0BK =0;>30 =0 ?@81K;L ?@8 A>740=88 =>2KE >1>A>1;5==KE ?>4@0745;5=89;
o      ?>@O4>: C?;0BK 020=A>2KE ?;0B5659

Answer : Exchange IMF and SPAM

I've used the 3rd party solutions and paid a bundle to do so.  I have cancelled them all and now rely on Connection Filtering which is set up in the same area as IMF under the Connection Filtering tab.  This is essentially what the 3rd party folks do but it's free!  Simply add one or more block list services which are generally free (there are some you can pay for out there).  My three favorite in order of preference (I include all 3 on my server but you will want to test to see what works for you) are:

1. Spamhaus (zen.spamhaus.org)
2. Barracuda (b.barracudacentral.org) You must register for this one but it's still free
3. UCEProtect-3 (dnsbl-3.uceprotect.net)

There are many others and variations from each provider as well.  After much testing, I believe the 3 above enabled and in the order listed provide exceptional spam protection.