Solved

Remove VPN users - Mail blocked by IML / SCL

Posted on 2008-10-24
7
655 Views
Last Modified: 2013-11-16
I have set up a remote VPN solution for a client (Cisco ASA running WebVPN) all appears to be fine, however remote users who are emailing other users in the same mail domain. are getting their mail blocked by the Exchange 2003 Intelligent Mail filter.

_______
example header from a filtered email (X-SCL rating of 8) from home worker to office worker:
 
x-sender: usera@domainname.org.uk
x-receiver: userb@domainname.org.uk
X-SCL: 8 91.28%

Now I know you can't "whitelist" against the IMF, but you are supposed to be able to bypass it by IP address, so Ive added the IP address of the firewall applieance, and the subnet thats being leased to the remote VPN users. (And enabled this on the Default SMTP virtual Server)

Still the problem remains?

Has anyone Cisco expert or Exchange Expert seen this before? Im loathed to log a call to Cisco TAC because they will blame Exchange and Im loather to call Microsoft for the same reason

Any thoughts?

0
Comment
Question by:Pete Long
  • 4
  • 3
7 Comments
 
LVL 12

Accepted Solution

by:
florin_s earned 500 total points
ID: 22794846
Hi,

We do not use the IMF in our company but I might have found something that helps, it seems that there are some bugs related to the IMF:

Therefore, if you need messages with the SCL level of 8 to be blocked, and messaged with the SCL level of 6 to be moved to the user's Junk E-Mail folder, you will need to configure the threshold levels with 7 and 5 respectively:

Please see the following link:

http://www.petri.co.il/bug_in_imf_interface.htm
0
 
LVL 57

Author Comment

by:Pete Long
ID: 22794895
I had a read through that, which sent me round the houses to http://support.microsoft.com/default.aspx?scid=kb;en-us;867633 which tells me these guys should get stamped with an SCL of -1 anyway? The article above is more concerned with the wrong levels getting blocked, these guys should not get a high SCL rating at all - its essentially internal mail flow? - still head scrathing :(

Thanks for your input m8
0
 
LVL 12

Assisted Solution

by:florin_s
florin_s earned 500 total points
ID: 22798782
As I said before I also have no real experience with IMF but as I see this might be a trial and error situation, try with different raitings.
I am curious about the result, anyway I will ask my colleagues if they encountered this before and post here.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 57

Author Comment

by:Pete Long
ID: 22812228
Call opened to Cisco TAC
0
 
LVL 57

Author Comment

by:Pete Long
ID: 22921625
Still with TAC.........................
0
 
LVL 12

Expert Comment

by:florin_s
ID: 22922089
Do you have something until now, because until now I think it takes a bit long.
What did they tell you?
0
 
LVL 57

Author Comment

by:Pete Long
ID: 22922509
waiting on third party to send info to CIsco :(
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Use of TCL script on Cisco devices:  - create file and merge it with running configuration to apply configuration changes
Concerto Cloud Services, a provider of fully managed private, public and hybrid cloud solutions, announced today it was named to the 20 Coolest Cloud Infrastructure Vendors Of The 2017 Cloud  (http://www.concertocloud.com/about/in-the-news/2017/02/0…
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question