Sunday, May 28, 2006

Error: 7515 - Intelligent Message Filter attempted to filter a message with ID... error code is 0x800710f0

I see Event Id 7515 from the MSExchangeTransport pop up in the event logs of servers on which the Exchange 2003 SP2 Intelligent Message Filter (IMF) is enabled. This is because, by design, the IMF does not filter messages larger than 3MB. Heaven help us if spammers start sending messages. We know spammers are going to hell, but if they start sending spam larger than 3MB, they are going to burn in a very special level of hell. A level they reserve for child molesters and people who talk at the theater. But, I digress....

Microsoft has released a KB that explains this, see KB 907691: "Intelligent Message Filtering in Exchange Server 2003 does not scan messages that are larger than 3 MB". Though this shows up as an "error", it is really a "feature". Here is the error, in case you are interested:

Event Type: Error
Event Source: MSExchangeTransport
Event Category: SMTP Protocol
Event ID: 7515
Date: 5/27/2006
Time: 4:18:26 AM
User: N/A
Computer: HNLEX01
Description:An error occurred while Microsoft Exchange Intelligent Message Filter attempted to filter a message with ID <000d01c68197$db290060$030ba8c0@tambdymiemz3i9>, P1 From smtp:cheyne@somorita.com and Subject Re: photos. This message will not be filtered. The error code is 0x800710f0.

3 Comments:

At 12:52 PM, Blogger James said...

Cheers man. This is exactly what I was getting and the MS KB article (and your own of course) explained why. Very helpful.

 
At 11:09 PM, Blogger Robert Haerkens said...

I'm not sure it the message is really passed through without problems. Twice if've seen that it was impossible to send a message larger than 3 MB because it was rejected but I couldn't find anything related to this 3 MB. Now I think I do.

Maybe an unscanned message is rejected at some other point in the IMF?

 
At 2:24 AM, Blogger Futile said...

*High Five* on the spammer comments.

Thanks for the entertaining (and informative) post.

 

Post a Comment

<< Home