LFSPAdmin
asked on
Mail going to junk mail when it is not configured
I have a user that does not have his Junkmail folder option configured.....so no mail should be going to his Junk mail folder....but it is still going there?....I have checked the options in Tools...Options...Junk Mail....and also checked OWA and both are set to NOT filter....but stuff still keeps going into it.
Help!
Thanks,
LFSPAdmin
Help!
Thanks,
LFSPAdmin
this one may help https://www.experts-exchange.com/questions/27221069/Forcing-Outlook-2007-to-NOT-filter-junk-email.html
ASKER
so would you set this up at the Exchange console?.....to set a transport rule that stamps all messages with a SCL of -1
Never done that?
Thanks,
Never done that?
Thanks,
yes, just add the transport rule in Exchange Management Console
under action, select "set spam confidence level to value" and enter -1
under action, select "set spam confidence level to value" and enter -1
ASKER
well I set it....and cleared his "Junk folder".....will let it run over night and see what we have in the morning....
Thanks Raysonlee!
Thanks Raysonlee!
welcome
ASKER
Well...5 messages in the Junk mail folder today....that did not work????
I have attached a Screen shot..is does this look right??
Hub-T.jpg
I have attached a Screen shot..is does this look right??
Hub-T.jpg
try restart the Transport Service by
Net Stop MSExchangeTransport
Net Start MSExchangeTransport
check the SCL of those 5 messages by procedures stated here http://technet.microsoft.com/en-us/library/bb124595.aspx
to make sure the rule applied, can u try prepend a string to the subject to identify them?
Net Stop MSExchangeTransport
Net Start MSExchangeTransport
check the SCL of those 5 messages by procedures stated here http://technet.microsoft.com/en-us/library/bb124595.aspx
to make sure the rule applied, can u try prepend a string to the subject to identify them?
ASKER
restarted the Transport...but could not find "SCL" in any of the headers????
below is an example of the header...with any info removed of course.
Received: from p02c12m024.mxlogic.net (208.65.145.245) by LFSPEXCH.lfsp.local
(216.180.32.54) with Microsoft SMTP Server (TLS) id 8.2.255.0; Fri, 5 Aug
2011 08:24:34 -0500
Received: from unknown [12.106.49.41] (EHLOm) by
p02c12m024.mxlogic.net(mxl _mta-6.10. 0-2) over TLS secured channel with ESMTP
id f1feb3e4.0.319716.00-2286. 423590.p02 c12m024.mx logic.net (envelope-from
<>); Fri, 05 Aug 2011 07:24:47 -0600 (MDT)
Received: from ([172.16.235.82]) by smtpdt. with ESMTP id
48N3WH1.76637951; Fri, 05 Aug 2011 07:49:05 -0500
X-ZLAuthOn: <null>
Received: from (EHLO DTE10-HUB1.MORKEE.COM
GF-VONTU-SMTP-4 [172.16.235.181] (may be forged)) by 172.16.235.82 with ESMTP
id BZPHZYZMUOEWXWKZ1O51SVVG12 ZY00T1A for <>; Fri, 5 Aug 2011 08:24:41 -0500
(CDT)
Received: from MKDAG1-MBX2.morkee.com ([fe80::b9f2:a058:6ca2:deb 4]) by
DTE10-HUB1.MORKEE.COM ([fe80::8830:4de6:ed08:663 2%10]) with mapi id
14.01.0289.001; Fri, 5 Aug 2011 08:24:41 -0500
From:
To: "
Subject: New Contact Info...
Thread-Topic: New Contact Info...
Thread-Index: AcxTcweEYFKlCX53QOqOgNcS6o YkfQ==
Date: Fri, 5 Aug 2011 13:24:40 +0000
Message-ID: <B3F4041560A40347B3646EE9A B17AB61024 5C3@MKDAG1 -MBX2.MORK EE.COM>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: []
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Content-Type: multipart/alternative; boundary="=_reb-r07E96BDD- t4E3BEF1F"
X-Processed-By: Rebuild v2.0-0
X-Spam: [F=0.1428571429; B=0.500(0); spf=0.500; STSI=0.500(-16); STSM=0.400(-16); CM=0.500; MH=0.500(2011080508); S=0.200(2010122901); SC=none]
X-MAIL-FROM:
X-SOURCE-IP: [12.106.49.41]
X-AnalysisOut: [v=1.0 c=1 a=ip5ioaBJgQ0A:10 a=BHfQJthtv6QA:10 a=BLceEmwcHo]
X-AnalysisOut: [wA:10 a=xqWC_Br6kY4A:10 a=BqgCfznX7MUA:10 a=osx1VOCzZiLTWz]
X-AnalysisOut: [ut8f0fpw==:17 a=4sPn884lAAAA:8 a=t6Ldwdx2AAAA:8 a=TW008Oyu]
X-AnalysisOut: [fbwgTSefqU4A:9 a=RSH_pRqUSBf_zfYFj2gA:7 a=CjuIK1q_8ugA:10 ]
X-AnalysisOut: [a=jgrNIiUaAowA:10 a=U7BOtjLYL10A:10 a=-27RCJUQNL8A:10 a=eu]
X-AnalysisOut: [eA0NoA4LoA:10 a=7avBT4ExCZBZOlR3nwcA:9 a=n_7zQFB3waYsP8OFe]
X-AnalysisOut: [zUA:7]
Return-Path:
below is an example of the header...with any info removed of course.
Received: from p02c12m024.mxlogic.net (208.65.145.245) by LFSPEXCH.lfsp.local
(216.180.32.54) with Microsoft SMTP Server (TLS) id 8.2.255.0; Fri, 5 Aug
2011 08:24:34 -0500
Received: from unknown [12.106.49.41] (EHLOm) by
p02c12m024.mxlogic.net(mxl
id f1feb3e4.0.319716.00-2286.
<>); Fri, 05 Aug 2011 07:24:47 -0600 (MDT)
Received: from ([172.16.235.82]) by smtpdt. with ESMTP id
48N3WH1.76637951; Fri, 05 Aug 2011 07:49:05 -0500
X-ZLAuthOn: <null>
Received: from (EHLO DTE10-HUB1.MORKEE.COM
GF-VONTU-SMTP-4 [172.16.235.181] (may be forged)) by 172.16.235.82 with ESMTP
id BZPHZYZMUOEWXWKZ1O51SVVG12
(CDT)
Received: from MKDAG1-MBX2.morkee.com ([fe80::b9f2:a058:6ca2:deb
DTE10-HUB1.MORKEE.COM ([fe80::8830:4de6:ed08:663
14.01.0289.001; Fri, 5 Aug 2011 08:24:41 -0500
From:
To: "
Subject: New Contact Info...
Thread-Topic: New Contact Info...
Thread-Index: AcxTcweEYFKlCX53QOqOgNcS6o
Date: Fri, 5 Aug 2011 13:24:40 +0000
Message-ID: <B3F4041560A40347B3646EE9A
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: []
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Content-Type: multipart/alternative; boundary="=_reb-r07E96BDD-
X-Processed-By: Rebuild v2.0-0
X-Spam: [F=0.1428571429; B=0.500(0); spf=0.500; STSI=0.500(-16); STSM=0.400(-16); CM=0.500; MH=0.500(2011080508); S=0.200(2010122901); SC=none]
X-MAIL-FROM:
X-SOURCE-IP: [12.106.49.41]
X-AnalysisOut: [v=1.0 c=1 a=ip5ioaBJgQ0A:10 a=BHfQJthtv6QA:10 a=BLceEmwcHo]
X-AnalysisOut: [wA:10 a=xqWC_Br6kY4A:10 a=BqgCfznX7MUA:10 a=osx1VOCzZiLTWz]
X-AnalysisOut: [ut8f0fpw==:17 a=4sPn884lAAAA:8 a=t6Ldwdx2AAAA:8 a=TW008Oyu]
X-AnalysisOut: [fbwgTSefqU4A:9 a=RSH_pRqUSBf_zfYFj2gA:7 a=CjuIK1q_8ugA:10 ]
X-AnalysisOut: [a=jgrNIiUaAowA:10 a=U7BOtjLYL10A:10 a=-27RCJUQNL8A:10 a=eu]
X-AnalysisOut: [eA0NoA4LoA:10 a=7avBT4ExCZBZOlR3nwcA:9 a=n_7zQFB3waYsP8OFe]
X-AnalysisOut: [zUA:7]
Return-Path:
I see, it looks like the message was moved to the Junk folder by other Anti-Virus / Anti-SPAM program, not Exchange / Outlook.
ASKER
huh....we use to have a program that would do that....but that server is not even on line anymore...and all of our Anti-spam is done thru MX logic....outside our firewall.
not sure where to go from here?
Just looked thru the settings again....I see nothing.
not sure where to go from here?
Just looked thru the settings again....I see nothing.
ASKER
on the phone with McAfee Saas now.....
ok, u use MX Logic to filter SPAM before going into your Exchange server.
Now try remove the condition for this Transport rule, set all messages' SCL to 9 and add one more action to prepend a string in front of the subject of every messages, leave it overnight and see what happen.
Now try remove the condition for this Transport rule, set all messages' SCL to 9 and add one more action to prepend a string in front of the subject of every messages, leave it overnight and see what happen.
ASKER
ok...so I remove the Trans rule that I put in before to set it to -1 ....then set all messages to a SCL of 9(This would be done in Exch console correct?).....the add a string to each message???not sure about that?(is this done in Exch console as well?....and what string?
Thanks for your help....I am getting nowhere fast with this myself.
Jeff
Thanks for your help....I am getting nowhere fast with this myself.
Jeff
ASKER
I tried to set mailbox to the following today...
set-mailbox -identity rjm -SCLJunkEnabled $false
but got Junk mail this afternoon.....booooo
set-mailbox -identity rjm -SCLJunkEnabled $false
but got Junk mail this afternoon.....booooo
what i'm trying to do is to force all messages go to junk (by setting SCL to 9) if Exchange's SPAM filter is activated and label all messages being processed by your rule with "prepend a string in front of the subject" (just select it in action of your rule).
ASKER
is there a way to do this without it affecting 100 users...I am only having issues with one user?
in the rule's criteria, you can select message sent to that user only.
If the problem only occur for one user, it's not likely to be settings in Exchange server.
Would it be the PC installed some anti-spam software without your permission? do u use local profile / roaming profile? do u have a clean PC that can let him try on?
If the problem only occur for one user, it's not likely to be settings in Exchange server.
Would it be the PC installed some anti-spam software without your permission? do u use local profile / roaming profile? do u have a clean PC that can let him try on?
ASKER
well...doing what we have done so far we have slowed it down....not sure how yet...
Just had his sec. call.....thought i would tell about this...she had one in Quarantine...moved it to the Inbox....and the system moved it back to Quarantine!!!!!......how do you find figure out what is moving these messages????
Just had his sec. call.....thought i would tell about this...she had one in Quarantine...moved it to the Inbox....and the system moved it back to Quarantine!!!!!......how do you find figure out what is moving these messages????
ASKER
sorry for the delay
ASKER
sorry...I should have said Junk mail.
if you are using Outlook 2010, there is another thing you need to check:
http://answers.microsoft.com/en-us/office/forum/office_2010-outlook/how-to-disable-junk-mail-filter-in-outlook-2010/80a3c80c-eadc-4706-a39c-f30ef10518a7
http://answers.microsoft.com/en-us/office/forum/office_2010-outlook/how-to-disable-junk-mail-filter-in-outlook-2010/80a3c80c-eadc-4706-a39c-f30ef10518a7
ASKER
the reg key was set to 1.....so as I read it...it was turned off.....the other option was to delete the reg key....so I did.....cleaned out the "Junk folder" (had almost 50 in it.).....and will see how it does over the weekend.
Thanks,
Jeff
Thanks,
Jeff
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Had to call MS...but this FIXED the issue....