Users receive many spam e-mail messages when you use Antigen for Exchange with Advanced Spam Manager

You use Microsoft Antigen 9.0 for Exchange with Advanced Spam Manager or Sybari Antigen 8.0 Service Release 3 for Microsoft Exchange with Advanced Spam Manager. However, users in the organization receive many spam e-mail messages.

To resolve this issue, you must configure Antigen to prevent most of the spam e-mail messages from being delivered. To do this follow, these steps.

Step 1: Schedule the SpamCure engine update to occur every 15 minutes

To do this, follow these steps:

1. Click Start, point to Programs, point to Antigen for Exchange, and then click Sybari client.
2. In the What server that you want to connect to box, click or type the Exchange Server server that is running Sybari Antigen, and then click OK.
3. In the Shuttle Navigator on the left, click Scanner Update.
4. In the Work Panel on the right, click SpamCure in the upper pane.
5. Verify that the Scheduler column displays Enabled. If not, click Enable in the extreme upper right of the Work Panel.
6. In the lower part of the Work Panel, configure an appropriate time in the Time box.
7. Under Frequency, click Daily, click to select the Repeat every check box, and then configure 15 minutes in the hours and minutes box to the right.
8. Click Save in the lower-right corner of the Work Panel.

Step 2: Configure no more than two real-time block list (RBL) servers

To do this, follow these steps:

1. In the Shuttle Navigator, click FILTERING, and then click Mailhost.
2. In the Work Panel, under Mailhosts List, click RBL Servers.
3. At the bottom, click Add.
4. In the box that appears under RBL Servers on the right, type the domain name of the RBL server that you want, and then click Save.
   
   For example, type OpenRelays.org if that is the domain name of the RBL server.
5. Repeat steps c and d to add another server. We recommend that you do not add more than two RBL servers.
6. On the right, in the Filters box, click Enabled.
7. In the Action box, click the option that you want.
8. On the General tab, click to select the Notify Administrator and the Quarantine check boxes, as appropriate for your situation.
9. On the Identify tab, click to select one or more of the check boxes as appropriate for your situation.
10. Click Save.

Step 3: Create keyword and subject filter lists

You can create keyword and subject line filter lists in addition to the keyword lists that are built in to Antigen. The keyword and subject line lists that you create should include keywords from most spam messages that reach users in the organization. To do this follow, these steps.

A. Create keywords and subject lines lists

1. In the Shuttle Navigator, click Filter Lists.
2. In the Work Panel, click Keywords under List Types.
3. Click Add, type an appropriate name in the text box that appears, and then press ENTER.
   
   For example, type MyList, and then press ENTER.
4. Click Edit/Import.
5. In the Include in Filter pane, click Add.
6. Type the word that you want to include in the list, and then press ENTER.
7. Repeat steps 5 and 6 to include all the words that you want.
8. Close the Edit Filter List dialog box, and then click Save.
9. Create a subject lines list by clicking Subject Lines in the Work Panel under List Types, and then repeating steps 3 through 8.

B. Enable the keywords list

1. In the Shuttle Navigator, click Keyword under FILTERING.
2. In the Work Pane, click SMTP Scan Job. Under Filter Lists in the bottom pane, click the list name that you created.
3. On the right, click Enabled in the Filter box. In the Action box, click the action that you want.
4. On the General tab, click to select the check boxes of the options that you want. We recommend that you click to select the Quarantine check box to make sure that you can recover any legitimate e-mail messages that may be filtered.
5. On the Identify tab, click to select the check boxes of the options that you want.
6. Click Save.

C. Enable the subject lines list

1. In the Shuttle Navigator, click Content under FILTERING.
2. In the Work Pane, click SMTP Scan Job. Under Content Fields in the bottom pane, click Subject line.
3. Under Filter Lists, click Lists.
4. In the list that appears, click the list that you created.
5. On the right, click Enabled in the Filter box. In the Action box, click the action that you want.
6. On the General tab, click to select the check boxes of the options that you want. We recommend that you click to select the Quarantine check box to make sure that you can recover any legitimate e-mail messages that may be filtered.
7. On the Identify tab, click to select the check boxes of the options that you want.
8. Click Save.

Step 4: Forward spam for analysis

You may notice that the SpamCure engine reports false positives (the engine identifies legitimate e-mail as spam) or false negatives (the engine does not identify spam). In this case, you can forward these e-mail messages to Microsoft for analysis by Mail-Filters.

You can forward messages that you identify as false positives to the following Microsoft address:You can forward messages that you identify as false negatives to the following Microsoft address:

For more information, click the following article number to view the article in the Microsoft Knowledge Base: