Avatar of ivolach
ivolach
 asked on

Emails from one domain rejected as spam

All emails from one specific domain are being rejected by Exchange 2016 server with the following error:
host said: 554 Spam email. Email Session ID: {XXXXXXXXXXXXXXXXXX} (in reply to end of DATA command)

I have added the domain to the safe senders list but the problem persists.

The rejected domain is not black listed on any list.
Exchange

Avatar of undefined
Last Comment
ivolach

8/22/2022 - Mon
Tim Phillips

Try this command: Set-ContentFilterConfig -BypassedSenderDomains [DomainToBeWhitelisted.com]

Example for multiples: Set-ContentFilterConfig -BypassedSenderDomains microsoft.com,woshub.com,gmail.com
Example for one e-mail address: Set-ContentFilterConfig -BypassedSenders safesender@gmail.com

I don't know if this is different than "safe senders" though.
ivolach

ASKER
That is the command I have used to add them to safe senders list.
It now appears that all emails coming from gmail are getting the same "treatment"
Tim Phillips

oh, are you trying to whitelist @gmail.com?  That seems like a bad idea since there are lots of gmail spam accounts out there.
Run this to see what your whitelist already has: get-ContentFilterConfig
look for this section for e-mails: "BypassedSenders"
look for this section for domains: "BypassedSenderDomains"

This may shed light on what is going on.  First, what is in there?  The specific e-mail you care about or the whole domain or neither?
Your help has saved me hundreds of hours of internet surfing.
fblack61
Dr. Klahn

Agree with Tim.  Before whitelisting anything, you need to find out what the problem is.  Domains can change hands, computers can be infected, a rogue user may try to blacken the company's reputation.

Find out why the emails are being rejected and then address that, one, specific problem.
ivolach

ASKER
I am not trying to whitelist gmail.
We have a partner hosting his domain email on google and I am trying to whitelist his domain xxxx.com
when I run the BypassedSenderdomain the only domain on that list is the xxx.com I have a problem with
Tim Phillips

in the reject e-mail does it confirm that Exchange is blocking it?  Like any reference to Microsoft Exchange?  I'm wondering if it is being blocked by a different spam filter (like maybe you are using a service and didn't realize it?  Like Mimecast, etc.)
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
ivolach

ASKER
It seems to be a little convoluted:
The Checkpoint firewall was sort of blocking the messages as spam, but regardless the messages were transferred to the exchange server where they were shown on the log as 'socket error' but the reply to the sender was spam error 554.
ASKER CERTIFIED SOLUTION
Tim Phillips

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
ivolach

ASKER
I agree, and have disabled the firewall spam filter.
The confusing part is that the "socket error" showed up on the exchange log.
Tim Phillips

So was there anything else you needed?
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck
ivolach

ASKER
After disabling the Checkpoint firewall spam filter, Everything is working now.

Not quite sure why would Checkpoint block all emails from the particular domain but, all is good now. :-)
Thanks,