We help IT Professionals succeed at work.

Exchange 2007 5.7.1 Errors

sraley
sraley asked
on
Receiving "Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550 5.7.1 Message rejected due to content restrictions (state 18)."

Sporadically when our exchange 2007 receives email. I don't have any special software and have setup no rules in Exchange so I don't know what comes out of the box that I need to turn off. This has just started recently so I don't know if something was turned on due to  a recent windows update.
Comment
Watch Question

It could be a intelligent message filter (IMF) update that is triggering these. I don't suggest your turn IMF off though. May want to check your SCL rating levels (spam rating). You can increase by one each and see if that makes a difference.

This explains IMF and how to change your SCL settings.
http://www.msexchange.org/tutorials/microsoft-exchange-intelligent-message-filter.html

Author

Commented:
well I founnd the SCL rating level. Increasing doesn't make it worse? Its already at a 7.  I have not found IMF or anything called that based on the article since it doesn't have screen shots of exchange 2007 so I can't find anything called protocols or IMF tab. Somehow on the organization hub I found SCL policy.
Mahmoud SabrySenior IT Systems Engineer

Commented:
in your exchange server , HUB server go to the following path
C:\Program Files\Microsoft\Exchange Server\TransportRoles\Logs\AgentLog

open today's log, search for the ip addresses for google email and look to that line and in the end of the line which u find this email address, tell us what is the content filter action

Author

Commented:
RejectMessage,550 5.7.1 Message rejected due to content restrictions,SclAtOrAboveRejectThreshold,8
Mahmoud SabrySenior IT Systems Engineer

Commented:
then this message is classified as its content is SPAM, as its SCL is 8, and you configured your exchange server to reject messages that has SCL larger than 7

u have some options to do overwrite this

raise the SCL value to 9, not recommended
configure the antispam agent to not filter message to some of your users

To use the Exchange Management Shell to add a sender to the BypassedSender list on the content filter configuration
To create a variable to hold the BypassedSenders list, run the following command:

 Copy Code
$list = (Get-ContentFilterConfig).BypassedSenders
 

To verify that the $list variable contains data, run the following command:

 Copy Code
$list
 

The Exchange Management Shell will return a formatted list of sender SMTP addresses.

To add entries to the $list variable, run the following command:

 Copy Code
$list.add("kwekua@contoso.com,tiffany@contoso.com")
 

Author

Commented:
well had someone else do another test and i don't know what this means
2010-06-14T17:21:37.785Z,08CC6DA51175386F,192.168.1.5:25,12.110.125.250:21331,12.110.125.250,<4C7FE58CFD70D34D923D29706AC3E96F0463A54F@md-hq-exchange.md.loc>,btv1==78122017bcc==jtippett@mseanea.org,jtippett@mseanea.org;,putara@smhec.org,1,Content Filter Agent,OnEndOfData,AcceptMessage,,SCL,0
Mahmoud SabrySenior IT Systems Engineer

Commented:
this message was from trusted user

SCL = 0, means that this user is trusted

Author

Commented:
But the users email bounced back with a 5.7.1 error to the sender.

Author

Commented:
It appears to be intermittant. One of 3 messages did get through from that user. the one I copied was the wrong one after going back and searching through the log file. the other 2 had SclAtOrAboveRejectThreshold,6


I set the threshold at 5. Originally it was 9. This could be alot of admin work if I keep the antispam filter enabled.
Senior IT Systems Engineer
Commented:
if so i suggest some thing to u, what about delivering these messages to the users junk email folder instead of rejecting them
to do this, uncheck the delete threshold, and reject threshold

in exchange management shell, write the following command
Get-Mailbox | Set-Mailbox -SCLJunkThreshold 6 -SCLJunkEnabled $true

you can play with the value of 6 as you need, this will apply the command to all mailboxes

Author

Commented:
I can try that but I still have my original question the threshold the first answer was to raise it,  Did I make it worse going from 9 to 5 ? Should I have gone from 9 to 10 instead?
Mahmoud SabrySenior IT Systems Engineer

Commented:
the maximum value for SCL is 9

9 mean that the message is 100% spam, and 0 means that the message is 100% trusted, between 0 and 9, u have integer values that calculate the rate of Spam for messages

you can't raise SCL threshold to 10, as the maximum is 9

Author

Commented:
ok I disabled the rejection and ran command for junk email. Delete was already unchecked. I will do a test as soon as someone arrives.