Emails marked as spam from a user in my domain to a user in my domain
Valid Emails are being marked as spam and going to the junk folder.
The emails are from a user in my domain to a user in my domain.
We are running Exchange 2013 but still have our legacy 2007 exchange server that we are using for public folders until I finish the conversion.
Any suggestions on what setting I have missed or need to set?
check the headers to make sure that it is not a spoofed email
Nicholas Yeatman
ASKER
No these are actual emails that the staff are sending to each other. But they were not receiving them until they looked in the junk folder and there they were. This has become worse over the last few days.
Nicholas Yeatman
ASKER
Mas
I have the exchange 2013 malware filter turned on but I don't think it could be that. We have Avast antivirus on our clients but they claim they don't send that type of message.
if they are genuine internal emails, then it sounds like something in Outlook that is causing this.
have you checked the junk options ?
although it is difficult to prove a negative, you could as a test get one user to completely close down Outlook and work in OWA instead and see if any emails go into junk, if they do not, then it would further point to it being something in Outlook.
Nicholas Yeatman
ASKER
I have check the junk mail options and they set to no automatic filtering. I have turned off the "Mail Shield" on our Avast security software. I am still getting emails from internal uers going to the Junk email folder marked as *** SPAM ***
Below is the Header information - it has a SCL: -1 but what does the "X-Antispam: spam, score=90" mean?
Received: from hermes3.forsythpl.org (10.1.10.30) by hermes3.forsythpl.org
(10.1.10.30) with Microsoft SMTP Server (TLS) id 15.0.1044.25 via Mailbox
Transport; Fri, 19 Aug 2016 17:07:37 -0400
Received: from hermes3.forsythpl.org (10.1.10.30) by hermes3.forsythpl.org
(10.1.10.30) with Microsoft SMTP Server (TLS) id 15.0.1044.25; Fri, 19 Aug
2016 17:07:37 -0400
Received: from hermes3.forsythpl.org ([::1]) by hermes3.forsythpl.org ([::1])
with mapi id 15.00.1044.021; Fri, 19 Aug 2016 17:07:37 -0400
Content-Type: application/ms-tnef; name="winmail.dat"
Content-Transfer-Encoding: binary
From: John Hausknecht <hausknechtj@forsythpl.org>
To: All Supervisors <AllSupervisors@forsythpl.org>
Subject: Email server maintenance
Thread-Topic: Email server maintenance
Thread-Index: AdHkMn3dAAb3QxVMQMSqGda7QFfsAg==
Date: Fri, 19 Aug 2016 17:07:36 -0400
Message-ID: <de017dee36164308a9e8e31e7ea864b5@hermes3.forsythpl.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Exchange-Organization-AuthAs: Internal
X-MS-Exchange-Organization-AuthMechanism: 04
X-MS-Exchange-Organization-AuthSource: hermes3.forsythpl.org
X-MS-Has-Attach:
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-MS-Exchange-Organization-SCL: -1
X-MS-TNEF-Correlator: <de017dee36164308a9e8e31e7ea864b5@hermes3.forsythpl.org>
MIME-Version: 1.0
X-MS-Exchange-Transport-FromEntityHeader: Hosted
X-MS-Exchange-Organization-MessageDirectionality: Originating
X-Originating-IP: [10.1.10.136]
X-MS-Exchange-Organization-Network-Message-Id: b4e1245f-8af6-46ff-3b9c-08d3c874d8ec
Return-Path: hausknechtj@forsythpl.org
X-Antispam: spam, score=90