Exchange Server Forums

Why art thou being quarantined?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2007] >> General >> Why art thou being quarantined?

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

Why art thou being quarantined? - 3.Dec.2007 10:41:27 AM

CSDAdmin

Posts: 17
Joined: 21.Nov.2005
Status: offline

Hello,
Our setup has a mailbox that scl 5-7 gets sent to.
It works fine, except the diag information isn't very helpful:

Diagnostic information for administrators:

Generating server: domain

email@address
#550 5.2.1 Content Filter agent quarantined this message ##

Original message headers:

Received: from mta.newsletters.aetv.com (198.31.62.43) by
exchange.domain (172.20.0.15) with Microsoft SMTP Server id
8.0.751.0; Fri, 30 Nov 2007 05:03:38 -0600
Date: Fri, 30 Nov 2007 06:03:38 -0500
Message-ID: <[email=Kilauea96712-5288-49341275-1-1015@flonetwork.com]Kilauea96712-5288-49341275-1-1015@flonetwork.com[/email]>
From: A&E TV Listings <ae.tvlistings@newsletters.aetv.com>
Reply-To: "A&E TV Listings "
<[email=ae.tvlistings-ctg0ieb7oaabpheaf4hdlndu73qkakaq@newsletters.aetv.com]ae.tvlistings-ctg0ieb7oaabpheaf4hdlndu73qkakaq@newsletters.aetv.com[/email]>
To: <phansen@domain>
Subject: A&E TV Listings
MIME-Version: 1.0
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-Path: ae.tvlistings@newsletters.aetv.com
Received-SPF: Pass (exchange.domain: domain of
ae.tvlistings@newsletters.aetv.com designates 198.31.62.43 as permitted
sender) receiver=exchange.domain; client-ip=198.31.62.43;
helo=mta.newsletters.aetv.com;
the reason isn't displayed beyond the: cfagent has quarantined this message.
Why?
was it SCL? was it a keyword we have blocked?

Is there a way to display said reason on these emails so we can adjust some settings?

Thanks!

Post #: 1

Featured Links*

RE: Why art thou being quarantined? - 4.Dec.2007 1:47:32 AM

rishishah

Posts: 576
Joined: 14.Nov.2006
From: Surrey, UK
Status: offline

It is possible to list the SCL rating in Outlook, which is very usefull - http://www.petri.co.il/display_scl_level_in_outlook_2003.htm

Ensure you Anti-spam is also setup to auto update from Microsoft.

Finally are you also implement Blacklisting?

_____________________________

Rishi Shah, MCP

If an advice works, report this to the fourm so that others are more confident about it.

Want a quicker answer - than describe your issue in as much detail as possible and exactly what steps you have already taken.

(in reply to CSDAdmin)

Post #: 2

RE: Why art thou being quarantined? - 13.Dec.2007 9:44:56 AM

CSDAdmin

Posts: 17
Joined: 21.Nov.2005
Status: offline

Thanks for the reply.

Unfortunately that doesn't help. As the message itself is never delivered, it is caught by agent, and resent from postmaster putting the scl at -1

MIME-Version: 1.0
From: postmaster
To: <akstcadessamnsdgs@adessa.at>
Date: Thu, 13 Dec 2007 06:31:52 -0600
Content-Type: multipart/report; report-type=delivery-status;
boundary="abf644b7-8c17-4cea-aa34-f23ad442835f"
X-MS-Exchange-Organization-SCL: -1
Content-Language: en-US
Message-ID: <162255584.32606946851959@adessa.at>
In-Reply-To: <162255584.32606946851959@adessa.at>
References: <162255584.32606946851959@adessa.at>
Subject: Undeliverable: Stock markets

I believe most people use 3rd party spam filtering, which may not be a bad idea with the issues we have with no reporting.

We use bl.spamcop but no manual ip's to block.
And only block the words viagra and stuff.

(in reply to CSDAdmin)

Post #: 3