Link to home
Create AccountLog in
Avatar of ivolach
ivolach

asked on

Emails from one domain rejected as spam

All emails from one specific domain are being rejected by Exchange 2016 server with the following error:
host said: 554 Spam email. Email Session ID: {XXXXXXXXXXXXXXXXXX} (in reply to end of DATA command)

I have added the domain to the safe senders list but the problem persists.

The rejected domain is not black listed on any list.
Avatar of Tim Phillips
Tim Phillips
Flag of United States of America image

Try this command: Set-ContentFilterConfig -BypassedSenderDomains [DomainToBeWhitelisted.com]

Example for multiples: Set-ContentFilterConfig -BypassedSenderDomains microsoft.com,woshub.com,gmail.com
Example for one e-mail address: Set-ContentFilterConfig -BypassedSenders safesender@gmail.com

I don't know if this is different than "safe senders" though.
Avatar of ivolach
ivolach

ASKER

That is the command I have used to add them to safe senders list.
It now appears that all emails coming from gmail are getting the same "treatment"
oh, are you trying to whitelist @gmail.com?  That seems like a bad idea since there are lots of gmail spam accounts out there.
Run this to see what your whitelist already has: get-ContentFilterConfig
look for this section for e-mails: "BypassedSenders"
look for this section for domains: "BypassedSenderDomains"

This may shed light on what is going on.  First, what is in there?  The specific e-mail you care about or the whole domain or neither?
Avatar of Dr. Klahn
Agree with Tim.  Before whitelisting anything, you need to find out what the problem is.  Domains can change hands, computers can be infected, a rogue user may try to blacken the company's reputation.

Find out why the emails are being rejected and then address that, one, specific problem.
Avatar of ivolach

ASKER

I am not trying to whitelist gmail.
We have a partner hosting his domain email on google and I am trying to whitelist his domain xxxx.com
when I run the BypassedSenderdomain the only domain on that list is the xxx.com I have a problem with
in the reject e-mail does it confirm that Exchange is blocking it?  Like any reference to Microsoft Exchange?  I'm wondering if it is being blocked by a different spam filter (like maybe you are using a service and didn't realize it?  Like Mimecast, etc.)
Avatar of ivolach

ASKER

It seems to be a little convoluted:
The Checkpoint firewall was sort of blocking the messages as spam, but regardless the messages were transferred to the exchange server where they were shown on the log as 'socket error' but the reply to the sender was spam error 554.
ASKER CERTIFIED SOLUTION
Avatar of Tim Phillips
Tim Phillips
Flag of United States of America image

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
Avatar of ivolach

ASKER

I agree, and have disabled the firewall spam filter.
The confusing part is that the "socket error" showed up on the exchange log.
So was there anything else you needed?
Avatar of ivolach

ASKER

After disabling the Checkpoint firewall spam filter, Everything is working now.

Not quite sure why would Checkpoint block all emails from the particular domain but, all is good now. :-)
Thanks,