FSE Marking ALL Inbound Email as Spam due to Content

New installation. All inbound mails are marked as Spam by Cloudmark for Content. From anyone: Yahoo, Gmail, Hotmail, O365... all mail(even when testing from the Edge server itself to itself by telnet 127.0.0.1 25).
New, greenfield installation:
Windows Server 2012 DC's, Windows Server 2012 functional level
Exchange 2013 All roles (CAS/Mailbox) on Windows Server 2012
Exchange 2010 Edge Server with Forefront Protection for Exchange 2010 on Windows 2008R2
Cloudmark engine is updating successfully and shows today's date as the version.
ALL emails inbound
Logs show:
When I set Forefront to stamp and continue processing (it goes into junk mail): "FSE Content Filter Agent,OnEndOfData,AcceptMessage,,SCL,9"
When I reject: "FSE Content Filter Agent,OnEndOfData,RejectMessage,550 5.7.1 Message rejected due to content restrictions,SclAtOrAboveRejectThreshold,9,v=2.1 cv=M6V0dUAs c=0 sm=1 tr=0 p=PdbawN1DAAAA:8 a=mFs5E60Zd2Jof9JknIyuNg==:117 a=dOjwkhujJHM2b/QMFULrXQ==:17
a=nDghuxUhq_wA:10 a=UzMy6eNlxVsA:10 a=pGLkceISAAAA:8 a=1XWaLZrsAAAA:8"
When I quarantine: "FSE Content Filter Agent,OnEndOfData,QuarantineMessage,550 5.2.1 Content Filter agent quarantined this message,SclAtOrAboveQuarantineThreshold,9,v=2.1 cv=ep3mkOZX c=0 sm=1 tr=0 p=PdbawN1DAAAA:8 a=WkljmVdYkabdwxfqvArNOQ==:117 a=8rjiAUXplIkA:10
a=YaFYD9Hhv54A:10 a=uBmvdUkjAAAA:8"
Messages are simply "This is a test" messages.
Product appears to be activated.

Hi
I think you have encountered a problem that all of incoming mails were treated as SPAM. The information that you provided indicates that these mails were marked as SCL rating 9 which will be deleted, rejected or
quarantine . However, normal mails should be mark as SCL-1 and these mails usually can be forwarded.
Please check the configuration with following steps:
What are the allow words or block words you defined before ?
How did you dispatch SCL rating for different mails ?
How were the mails treated in each SCL rating
You are able to get more information about “SPAM content filter” by the link below:
Understanding Anti-Spam and Antivirus Mail Flow
http://technet.microsoft.com/en-us/library/aa997242.aspx
Configuring spam filtering
http://technet.microsoft.com/en-us/library/dd441022.aspx#contentf
Microsoft Forefront Protection 2010 for Exchange Server
http://technet.microsoft.com/en-us/library/cc482977.aspx

Similar Messages

Server Alerts reports "Virus Detected in inbound email" for spam

I receive hundreds of email every day that a Virus was detected in inbound email. When checking the contents of /Library/Server/Mail/Data/scanner/quarantine these messages are only spam message, not viruses. Virus infected messages seem to get placed in /Library/Server/Mail/Data/scanner/virusmails
I am running on Mavericks Server 3.1.2 (1354517)
serveradmin -v = Version 10.8 ($revision: 1.13 $ -- May 13 2014)
Does anyone know how to tune the Server Alerting to properly handle the files in /Library/Server/Mail/Data/scanner so that virusmails are reported as virus's but quarantine is not reported?
I have searched high and low, and cannot find where this is controlled. With Mavericks, I no longer see Virus Alerts under the alerts management menu of Server.app
I checked amavisd configs, as well as many other files under /Library/Server for any references to "quarantine" text, to no avail.
I dumped all of serveradmin settings, and do not see anything that references quarantine except for the quarantine recipient addresses for spam and viruses.
Is anyone else experiencing this, or does anyone know how to solve this?
Thanks in advance.

I received over 200 spam messages yesterday that got reported as viruses to me, and out of frustration, I discovered a work around. I don't know if this is the result of a past update, or the steps I used trying to reset the server, but I performed the following and was able to suppress the email alerts. At the time of my original posting, the Alerts section of the Server.app did not offer any option for disabling the alerts for virus..
1) Launch Server.app
2) Select Mail in left pane
3) Turn off Virus filtering
4) stop/start Mail server
5) Turn on Virus filtering
6) stop/start Mail server
7) Turn off Spam filtering
8) stop/start Mail server
9) Turn on Spam filtering
10) stop/start Mail server
11) Select Alerts in left pane
12) clear all active alert
13) Under notifications tab, I now saw "Mail" as an option
13.1) Turn off the alerts for Mail
Now I don't get spammed with Virus alerts for spam messages. This is not a fix for the configuration error in the alerting service, but it does stop the admin mailboxes from being flooded with virus alerts for all spam messages. I cannot confirm if it was the enable/disable of the filtering that added the Mail entry under alert notifications or if it was an update, as I did not check the alerts notifications at the time. I was frustrated, and desperate for a fix, so I did the first thing that came to mind. But now my Mail system alerts can be enabled/disabled through server.app so I am happy. Lets just hope for a classification fix in the Yosemite update coming this fall.

Mail is marking all my email as Junk

Mail is suddenly marking all my email as junk. Even email from senders I've got in my Address Book. What can I do? I have not changed any settings
Thanks for your help.

Have you tried resetting both the junk rule and the junk filter database? The Reset button in Preferences > Junk Mail only resets the latter...
You may get rid of the file where rules are stored so that Mail creates it anew as follows:
1. If you have a .Mac account and .Mac synchronization of Mail data is enabled either in Mail > Preferences > General or in System Preferences > .Mac, disable it before proceeding.
2. Quit Mail if it’s running.
3. In the Finder, go to ~/Library/Mail/.
4. Move any MessageRules.plist (Mail 2.x) and/or MessageSorting.plist (Mail 1.x) files to the Desktop. This is where Mail stores all the rules, including the rule that governs what the junk filter does.
5. Open Mail. As a result of having removed the rules files, the junk filter will be disabled now. You may want to either tell Mail to go offline immediately after opening it, or shut down the Internet connection before opening Mail, to prevent it from downloading anything until the junk mail filter has been enabled again.
6. Go to Preferences > Junk Mail and enable junk filtering.
7. Go online again if you went offline in step 5.
8. If the problem is fixed now and .Mac synchronization of Mail data was enabled at the beginning, enable it again, go to System Preferences > .Mac > Advanced, click Reset Sync Data, and choose the appropriate options to reset the Mail data stored on the .Mac server with the data locally stored on the computer, i.e. sync data must flow from the computer to the .Mac server.
Note: For those not familiarized with the ~/ notation, it refers to the user’s home folder. That is, ~/Library is the Library folder within the user’s home folder, i.e. /Users/username/Library.

How to mark all 500 emails as read

how do u mark all 500 emails as read.. please tell me.. i want to mark all my emails as read as i have 500 emails. i have already viewed them on pc and i dont want to view all of them again i dont have time

you can mark all as read at one time....
1 go to email
2 click edit
3 choose one email
4 choose the mark button, but keep pushing the mark button
5 while holding down the mark button, uncheck that chosen email
6 release the mark button after a second or two
7 choose "mark as read'

Verizon marking my outgoing email as spam; thanks, thanks a lot

Is anyone else as sick as I am of Verizon's "know more than you" "big brotherish" attitude to us customers.
I'm trying to send email (not mass, just one email) to a client, and Verizon marks it as spam.
This is a critical email the customer is expecting. Couple of links in the emai.
Fios is nice, but not THAT nice if I can't even send a freakin' email... I might as well go back to Earthlink or Cox! In fairness, about 95% of my outgoing email goes through just fine, but 2-3 times per week, when I send an email to someone, I get the dreaded {word filter avoidance}response from Verizon which says...
and yes, i send the "offending" email off to the {word filter avoidance} genius people at [email protected], but can you contact these ivory tower {word filter avoidance}? No.
No, the only thing we can do is hope and pray these jerko**s unblock us and let our email get through.
Verizon, if you're listening...{word filter avoidance}

Normx wrote:
Nothing is free.
This is not a personal attack, but your answer “free email solutions” doesn’t fly.
I pay for email service from Verizon. The cost of Verizon e-mail is built in to the dsl service.
Yes, e-mail from Verizon is advertised as a “free” service. However…
You can only get that “free email” if you purchase service.
And that’s not free.
http://www22.verizon.com/home/fiosinternet/
First, the good news:
I rarely get spam from the Verizon server (I have 6 accounts/sub-accounts thru Verizon, using outlook express, 1 or 2 spam a month).
The bad news:
I have enhanced dsl and have been experiencing random spam blocks.
Yes, I took the time to read the spam faqs and dozens of the postings in this forum.
Yes, I have the latest setting for outlook express http://www22.verizon.com/Support/Residential/Internet/fiosinternet/email/setup+and+use/questionsone/...
Yes, I know the e-mail limits, 100 names per e-mail, 500 e-mails per hour
https://my.verizon.com/central/vzc.portal?_nfpb=true&_pageLabel=vzc_help_policies&id=EmailPolicy
Yes, I have repeatedly sent the same email to [email protected]
I understand the difficulty of filtering spam, but it seems there should be means test that says if I send 1 email to 1 person, that’s probably not spam. After all, if the spam filter is really just a program, then it is using a numerical assessment, and the parameter has been set to ignore this..
Thank you for your time to help, but telling paying customers we don’t really have that good of service as we advertise, isn’t a solution, it’s an excuse.
Respectfully,
Norm
As a fellow paying customer (note that this is a peer-to-peer forum), I'm not making excuses. I'm stating facts. There are free email offerings that are better than ISP provided email. Period.
If you want to use Verizon's email, that's your choice. If you want to switch to another ISP and use their sub-par email product, that is also your choice.
It just doesn't make sense to me to trade excellent internet for not-as-fantastic internet just to use a "better" email product when there are actual better email products available for free that are not ISP-dependent.
If a forum member gives an answer you like, give them the Kudos they deserve. If a member gives you the answer to your question, mark the answer as Accepted Solution so others can see the solution to the problem.
"All knowledge is worth having."

Restored my iPad marking all old emails as unread

I restored my iPad. Now my hotmail email account is downloading all my old emails and marking as unread. Is there any way to stop this? Thanks

I am having a very similar problem on my E71 on v400 firmware.
Sycing still works but since yesterday lots of old emails from various dates in various folders have become showing as unread. Giving me a notification on every sync for about an hour as more and more mails were marked as unread.
I'm currently going through the mails and marking them as read and hoping this doesn't happen again.

HT4864 I upgraded my iCloud capacity AFTER I already had my email shut down. Now all inbound email rejects and senders get a notice that my email is "over quota." Apple support requires a serial number, but this is about iCloud and I do not have a Mac.

I upgraded my storage AFTER I received an email that my iCloud email will be shut off until I was no longer over capacity. I can now send emails, but when anyone sends me an email it rejects and they receive a message that I am "over quota."

If you have an iCloud account it must have been created on a Mac or iOS device. Provide the serial number of that device in order to reach Apple support.

Mark All Email as Read on Palm Pre

Hi,
I'm wondering how I would mark all my email as read on the Palm Pre. I don't seem to see any options for it without going to each email separately. If that option isn't available yet, it would be greatly appreciated in an update. Thanks!
Post relates to: Pre p100eww (Sprint)

This is a necessity. I really hope they provide this functionality in an update right away. We need to be able to select multiple emails for deletion and also to mark all as read. My business email has more than 200 unread messages and I am not going to open each one.

Email - Mark all feature?

I get hundreds of emails everday, some of which I do not need to read. Is there a way to mark all the emails at once without tapping on each email in the edit screen?
Thanks

Thanks - That just does not make any sense!

Xperia z3 Mark all emails as read

I am using the email that came with the z3 and have upladed my POP acount for work, i cannot see a quick way to mark all emails as read as i can do on other email providers such as k9 mail..
Can anyone let me know if you can 'mark all as read?'
Solved!
Go to Solution.

Hi and welcome to the community! Since you're new please be sure that you have checked out our Discussion guidelines.
In the preinstalled email application, you need to long press one email to mark it. When an email is marked, you can either press the emails you want to mark as read or you can press in the top left corner to mark all your emails. You can then press the "Mark as read/unread" button in the top right corner.
- Official Sony Xperia Support Staff
If you're new to our forums make sure that you have read our Discussion guidelines.
If you want to get in touch with the local support team for your country please visit our contact page.

Counting inbound emails (including those automatically deleted using ERMS)

Hi all,
I have a requirement to be able to count all inbound emails in SAP CRM (5.0). This includes all emails that have been automatically deleted using ERMS after the creation of an Interaction Record and Service Ticket. Can anyone think of an easy way of doing this in SAP CRM? The Email Workbench and Agent Inbox do not display deleted email Workitems. The best option that I have been able to come up with is to export the Workitem Selection Report from transaction SWI1 into a spreadsheet and filter column Workitem ID for unique entries. Does anyone know of a better way of achieving this?
Thanks,
Onkar.

By using POP3, mail is automatically deleted from the server once downloaded by the client without further user intervention (granted, not immediately due to BTYahoos recent non-standard implementation of the POP3 protocol). By contrast, the whole point of IMAP is that mail is left on the server to be available to multiple devices and requires user intervention to delete. Why would a system which is designed to be used for leaving mail on a server be recommmended to someone who wished it to be deleted? If you wish to be pedantic, I agree the OP didn't ask for mail to be automatically deleted, but then nor did he specify immediate deletion either. I interpreted the request as the former, you the latter. Perhaps if we understood the underlying reason why he wished the mail to be deleted in the first place it would help in providing a solution.
There seems to be a recurring theme on this forum to promote IMAP as a universal panacea to overcome all mail problems which is diverting attention away from fixing BTYahoo's broken POP3 servers which have to my knowledge at least 4 problems. Two are deliberate by BTYahoo, lack of secure login and moving read items to the Trash folder temporarily before deletion. Two are faults which they seem either unable or reluctant to fix, intermittant authentication problems and inabilty to download even modest sized attachments on a slow connection.
Correction, he did ask them to be deleted automatically.

All Outgoing Emails Marked as SPAM

As of today, the primary PC we have used for years for our main .net account has all outgoing email marked as spam and blocked. Even single addressee, no content emails are bounced back as SPAM. I can still receive on the primary PC, and still send from other devices with the same account. I have deleted and re-added the account on the PC to make sure the server and port settings are current to no avail. Any thoughts on what might have happened?

As stated in the Spam FAQ page, you will not get any response when sending the message to [email protected] for review. You attach the message that you are unable to send, and they review it. Depending on the outcome of the investigation, the filter will either be updated to allow the content that was previously blocked, or it will be determined to be a legitimate block and no changes will be made.
Some troubleshooting steps you can try:
If you have a signature, try removing one line at a time from it and attempting to send the message again. Some signatures look like "ads" to the filters, apparently.
If you are using a pop3 client (Outlook, Outlook Express, etc.) try sending your message from the verizon.net website. If this resolves the issue, then it is something that your client is adding to the message that is causing it to be blocked.
If the Subject line of your message has a whole bunch of "Fwd: Fwd: Re: Fwd:" try removing some of them.
Remove any links/URLs from the email one at a time to isolate if one of them is causing the block.
Some people have suggested sending the message to [email protected] for investigation. This may work for you as well.
If a forum member gives an answer you like, give them the Kudos they deserve. If a member gives you the answer to your question, mark the answer as Accepted Solution so others can see the solution to the problem.
"All knowledge is worth having."

Microsoft Outlook marking received email as spam

Hi Guys,
I am facing problem when i am sending email to my outlook Email account.
Sender email id is like [email protected]
for the http://mycampaignsemail.co.in i have configured A record and SPF record.
But Problem is when outlook marks my email as spam.
Please suggest what to do with this problem and what are the addition requirements if i missed.
Please do needful.

Change your SPF record to overcome from the situation.

How do I mark unwanted emails as spam

how do I block unwanted emails Better yet!!!! how can I mark unwanted emails as spam?
Kathleen

Who is the email carrier?
Gmail app has an option to mark each email as Spam.
In the desktop Yahoo, AOL, etc, there are Spam controls you can use, and emails go to the Spam folder on the phone.
If the mail app you are using doesn't have an option to mark as Spam, then go to your computer and see if you can set up Spam controls for the email there. When the app syncs it should filter the spam according to the rules you've set up on your computer.

Gmail all emails show Spam

Hi,
I know lots of people are having problems with custom settings and Gmail in the new Apple Mail app through Mavericks-- however, I don't use any custom settings and for some reason all my emails through Gmail show up in the app as spam. For example, a legitimate email from a friend will show the sender and subject, but the "teaser version" body of the email, and the entire email once opened, are various sorts of spam messages. I'm assuming that when I updated something in the Mail app got routed strangely, but have no idea how to proceed-- I was hoping the most recent update would fix my bug but it hasn't, and it's inconvenient to always check on my phone (which, strangely enough, has no issues between Mail and Gmail).
Does anyone know of something I can do to fix this?
Thanks very much!

Hi thank you but I don't know what you mean!!! I went to mail preferences but couldn't see anything obvious to un check.
I also noticed that when i go to my documents all were added or modified at 07:08 AM!!!
The time and date on my macbook are correct!

FSE Marking ALL Inbound Email as Spam due to Content

Similar Messages

Maybe you are looking for