Why art thou being quarantined? (Full Version)

All Forums >> [Microsoft Exchange 2007] >> General


CSDAdmin -> Why art thou being quarantined? (3.Dec.2007 10:41:27 AM)

Our setup has a mailbox that scl 5-7 gets sent to.
It works fine, except the diag information isn't very helpful:

Diagnostic information for administrators:

Generating server: domain

#550 5.2.1 Content Filter agent quarantined this message ##

Original message headers:

Received: from mta.newsletters.aetv.com ( by
exchange.domain ( with Microsoft SMTP Server id
8.0.751.0; Fri, 30 Nov 2007 05:03:38 -0600
Date: Fri, 30 Nov 2007 06:03:38 -0500
Message-ID: <[email=Kilauea96712-5288-49341275-1-1015@flonetwork.com]Kilauea96712-5288-49341275-1-1015@flonetwork.com[/email]>
From: A&E TV Listings <ae.tvlistings@newsletters.aetv.com>
Reply-To: "A&E TV Listings "
To: <phansen@domain>
Subject: A&E TV Listings
MIME-Version: 1.0
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-Path: ae.tvlistings@newsletters.aetv.com
Received-SPF: Pass (exchange.domain: domain of
ae.tvlistings@newsletters.aetv.com designates as permitted
sender) receiver=exchange.domain; client-ip=;
the reason isn't displayed beyond the: cfagent has quarantined this message.
was it SCL?  was it a keyword we have blocked?
Is there a way to display said reason on these emails so we can adjust some settings?

rishishah -> RE: Why art thou being quarantined? (4.Dec.2007 1:47:32 AM)

It is possible to list the SCL rating in Outlook, which is very usefull - http://www.petri.co.il/display_scl_level_in_outlook_2003.htm

Ensure you Anti-spam is also setup to auto update from Microsoft.

Finally are you also implement Blacklisting?

CSDAdmin -> RE: Why art thou being quarantined? (13.Dec.2007 9:44:56 AM)

Thanks for the reply.

Unfortunately that doesn't help.  As the message itself is never delivered, it is caught by agent, and resent from postmaster putting the scl at -1

MIME-Version: 1.0
From: postmaster
To: <akstcadessamnsdgs@adessa.at>
Date: Thu, 13 Dec 2007 06:31:52 -0600
Content-Type: multipart/report; report-type=delivery-status;
X-MS-Exchange-Organization-SCL: -1
Content-Language: en-US
Message-ID: <162255584.32606946851959@adessa.at>
In-Reply-To: <162255584.32606946851959@adessa.at>
References: <162255584.32606946851959@adessa.at>
Subject: Undeliverable: Stock markets

I believe most people use 3rd party spam filtering, which may not be a bad idea with the issues we have with no reporting.

We use bl.spamcop but no manual ip's to block.
And only block the words viagra and stuff.

Page: [1]