Random Emails Going To Junk Box - HELP!! (Full Version)

All Forums >> [Microsoft Exchange 2007] >> Message Routing



Message


alestan -> Random Emails Going To Junk Box - HELP!! (6.Jan.2014 5:41:47 PM)

Hello All!

I am having an issue with a single Exchange 2007 user that will have known good emails go into junk box. I have done the following:

-Updated Exchange and defragged mailbox store, no errors to report
-Traced emails and get no errors to report in exchange server
-Removed junk email filtering via OWA, no change
-Set an SCL -1 for her profile on the exchange server to accept all messages in inbox, no change
-Created new mail profile, no change
-Removed mailbox and assigned new mailbox, no change
-Completely removed user account then reattached old mailbox as an archive, no change

The last 3 things I tried would work for a few days then known good emails would arrive back into junk box. There is no pattern that I can discern from this as an email that is white-listed will go into inbox normally then the next email from the same person goes into junk box.

Has anyone had this issue before? I am running out of things to try so any assistance would be much appreciated. Thank you!

P.S
Internet header details from whitelisted recipient that went into junk box below:

Received: from asp.reflexion.net (x.x.x.x) by remote.acme.com
(192.168.x.x) with Microsoft SMTP Server (TLS) id 8.3.342.0; Mon, 6 Jan
2014 11:04:12 -0800
Received: (qmail 31736 invoked from network); 6 Jan 2014 19:04:11 -0000
Received: from unknown (HELO mail-is-06.app.dca.reflexion.local) (10.81.14.6)
by 0 (rfx-qmail) with SMTP; 6 Jan 2014 19:04:11 -0000
Received: by mail-is-06.app.dca.reflexion.local (Reflexion email
security v7.10.2) with SMTP; Mon, 06 Jan 2014 14:04:11 -0500 (EST)
Received: (qmail 13180 invoked from network); 6 Jan 2014 19:04:10 -0000
Received: from unknown (HELO server506.appriver.com) (50.56.144.157) by 0
(rfx-qmail) with (DES-CBC3-SHA encrypted) SMTP; 6 Jan 2014 19:04:10 -0000
X-Note-AR-ScanTimeLocal: 1/6/2014 1:04:08 PM
X-Policy: kloecknermetals.com - kloecknermetals.com
X-Policy: kloecknermetals.com - kloecknermetals.com
X-Policy: kloecknermetals.com - kloecknermetals.com
X-Policy: kloecknermetals.com - kloecknermetals.com
X-Policy: kloecknermetals.com - kloecknermetals.com
X-Policy: Too many policies to list
X-Primary: phugheskelly@kloecknermetals.com
X-Note: This Email was scanned by AppRiver SecureTide
X-Virus-Scan: V-
X-Note-SnifferID: 0
X-Note: TCH-CT/SI:0-225/SG:5 1/6/2014 1:04:00 PM
X-GBUdb-Analysis: 0, 10.242.229.139, Ugly c=1 p=-0.959199 Source White
X-Signature-Violations: 0-0-0-32767-c
X-Note-419: 15.6001 ms. Fail:0 Chk:1345 of 1345 total
X-Note: SCH-CT/SI:0-1345/SG:1 1/6/2014 1:04:00 PM
X-Note: Spam Tests Failed:
X-Country-Path: UNKNOWN->PRIVATE->UNITED STATES
X-Note-Sending-IP: 10.242.229.139
X-Note-Reverse-DNS: smtp.exg6.exghost.com
X-Note-Return-Path: phugheskelly@kloecknermetals.com
X-Note: User Rule Hits:
X-Note: Global Rule Hits: G327 G328 G329 G330 G334 G335 G445
X-Note: Encrypt Rule Hits:
X-Note: Mail Class: VALID
X-Note: Headers Injected
Received: from [10.242.229.139] (HELO smtp.exg6.exghost.com) by
server506.appriver.com (CommuniGate Pro SMTP 6.0.2) with ESMTPS id 35240445;
Mon, 06 Jan 2014 13:04:08 -0600
Received: from DAGN05A-E6.exg6.exghost.com ([169.254.1.43]) by
HT06-E6.exg6.exghost.com ([10.242.230.113]) with mapi id 14.03.0158.001; Mon,
6 Jan 2014 13:03:00 -0600
From: Penny Hughes-Kelly <phugheskelly@kloecknermetals.com>
Subject: Kloeckner Load List
Thread-Topic: Kloeckner Load List
Thread-Index: Ac8K6+wtgoGLmSUsQR+7EIHZveEGGwABqPIAAAdGouA=
Date: Mon, 6 Jan 2014 19:03:00 +0000
Message-ID: <51109054F0C3B14C8DCBA4C3BC6B0C53217D58@DAGN05A-E6.exg6.exghost.com>
References: <51109054F0C3B14C8DCBA4C3BC6B0C53216B74@DAGN05A-E6.exg6.exghost.com>
<51109054F0C3B14C8DCBA4C3BC6B0C53217813@DAGN05A-E6.exg6.exghost.com>
In-Reply-To: <51109054F0C3B14C8DCBA4C3BC6B0C53217813@DAGN05A-E6.exg6.exghost.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [12.130.205.244]
x-rerouted-by-exchange:
Content-Type: multipart/alternative;
boundary="_000_51109054F0C3B14C8DCBA4C3BC6B0C53217D58DAGN05AE6exg6exgh_"
MIME-Version: 1.0
X-Rfx-Message-Id: 5929694235/13165404582/0001
X-Rfx-Recipient-Address: marciab@shipfli.com
To: Undisclosed recipients:;
Return-Path: phugheskelly@kloecknermetals.com
X-MS-Exchange-Organization-Antispam-Report: IPOnAllowList
X-MS-Exchange-Organization-SCL: -1




josh -> RE: Random Emails Going To Junk Box - HELP!! (6.Jan.2014 8:40:56 PM)

Hi,

I have been facing the same issue with my clients. The issue is sometimes rectified by creating a Transport Rule on the Exchange server, however, if these are the emails that are sent from a notification server or an email address that hits the inbox multiple times containing urls then that would definitely land into the Outlook junk email folder.

This is because of the Outlook Junk filter on the client machine which is enforced by the outlook client.

Here is an article to throw some light on it.
http://emailmigrations.com/exchange-2010-legitimate-emails-in-outlook-2010-junk-email/

The only way we can resolve this is by adding that email address in the safe sender lists in outlook and or creating a rule in outlook itself to move that email from that sender to Inbox.




alestan -> RE: Random Emails Going To Junk Box - HELP!! (7.Jan.2014 11:26:16 AM)

Thank you for the quick response.

What sort of Transport rule did you create on your exchange server to remedy the issue?
Exchange is reporting the messages are coming in as safe, not junk even though they are arriving in the junk folder. Messages coming into inbox will sometimes go into junk folder as the user is reading it.

I disabled phishing filtering setting in the outlook client to no avail. I read your article and added allowed ip's for the mail servers so I will see if that works.

Any other suggestions?




Page: [1]