Link to home
Start Free TrialLog in
Avatar of ianLMurdoch
ianLMurdochFlag for Luxembourg

asked on

MS Exchange 2007 Anti SPam filter question

Hi
We have the anti-SPam feature enabled on our MS exchange 2007 system and I am getting a lot of emails being filtered that I have no idea why.  I have attached an example (with users removed) below of one that is being quarentined but I have no idea why.  Is there something I am missing in the header ?

Diagnostic information for administrators:
Generating server: myserver.local
Receiver.name@myserver.lu
#550 5.2.1 Content Filter agent quarantined this message ##

Original message headers:

Received: from DNS02.aaa.aa (IP address) by mail.myserver.com
 (192.168.11.102) with Microsoft SMTP Server id 8.1.358.0; Mon, 10 Oct 2011
 14:54:08 +0200
X-TM-IMSS-Message-ID: <39fb580f0002d1ad@aaa.aa>
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-Class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/mixed;
      boundary="----_=_NextPart_001_01CC874C.BB7F3F5C"
Subject: Here are the photos that I want to share with you
Date: Mon, 10 Oct 2011 15:01:31 +0200
Message-ID: <5B4EE23F74711D4FAC808390F59D749D2EB681@Exchange02.aaa.aa>
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
Thread-Topic: Here are the photos that I want to share with you
Thread-Index: AcyHTLusohxfrve6R+CYo9YM/riMuQ==
From: SENDER<Sender.name@aaa.aa>
To: Receibver<Receiver.name@myserver.com>
X-TM-AS-Product-Ver: SMEX-8.2.0.1103-6.800.1017-18440.007
X-TM-AS-Result: No--6,700800-8,000000-31
X-imss-scan-details: No--7.431-10.0-31-1
X-TM-AS-User-Approved-Sender: No
Return-Path: Sender.name@aaa.aa
Received-SPF: None (LLLLLLL.myserver.local: sender.name@aaa.aa does
 not designate permitted sender hosts)
X-TM-AS-User-Blocked-Sender: No

Avatar of Hendrik Wiese
Hendrik Wiese
Flag of South Africa image

To stop this from happening. Try the following in EMS:

Use this command to add the user to the whitelist
Set-ContentFilterConfig -BypassedSenders foo@somedomain.com

Open in new window


Use this command to add the domain to the whitelist
Set-ContentFilterConfig -BypassedSenderDomains somedomain.com

Open in new window

Avatar of ianLMurdoch

ASKER

Thanks for the commands, which I will use to add domains and userts, but how do I know what rule or part of the filter is actually quarentining the message ?
The message received is just gobbledegook !  
It says #550 5.2.1 Content Filter agent quarantined this message ## but I have nothing in the content part of the filter to specify what should be removed

Regards
ASKER CERTIFIED SOLUTION
Avatar of Hendrik Wiese
Hendrik Wiese
Flag of South Africa image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks