Hi, several easy questions. 1 .- that I can use software to correctly read the logs of exchange 2003? 2 .- About Antivirus. When sending an email, first contact the SMTP server or passes before the spam. If you also have IMF, as he scans or scans before this email? They tell me that email but I sent a search on the exchange and no link appears, by olo which, I gather that neither the spam has not intervened?

Easy is a relative term. 1. Which logs are you talking about? The message tracking logs are text files that you can parse with fairly straightforward scripting. The transaction logs are something else entirely. 2. There can be an antivirus agent that looks at every message that passes into or out of the mailbox database, and can be configured to scan all messages in the database on a schedule. There can be an antivirus agent that looks at all SMTP mail that passes through it. What you have depends on what products you have acquired and how you have deployed them. IMF is an antispam, not an antivirus tool. As to your last sentence, it makes no sense to me, so I don't know what to tell you. Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Hi, 1.- I need to make reporting of emails sent, received emails, emails that go to the IMF, etc. .. 2.- Sorry, my mistake. I mean, the spam, when you scan this email?, Before the IMF, before it reaches the mailbox, ... Thanks

IMF doesn't scan the email until it is delivered. The message would appear in message tracking if IMF has processed it. If the message isn't in message tracking then it wasn't received by Exchange. Simon.Simon Butler, Exchange MVP Blog | Exchange Resources

But it can be received by the exchange and pass before the anti-spam and will not appear on the log?

If the message is reeived by Exchange, then it will show in message tracking. Note received. If the message is rejected at the point of delivery then it doesn't show. Simon.Simon Butler, Exchange MVP Blog | Exchange Resources

That is, if the antispam rejects it, does not appear in the message tracking no?

If a message is rejected at the SMTP conversation then the only way to see that information would be at the protocol level - i.e. you would have to enable SMTP protocol logging http://technet.microsoft.com/en-us/library/bb124469(EXCHG.65).aspx Protocol Logging, Event Logging, and Message Tracking

It was already enabled, but does not appear, do not know if it is blocking spam, but it should not appear in the log?. That external application suggest I use to read SMTP logs?