Sign in
 
HomeProductsLibraryLearnDownloadsSupportForums
Microsoft Forefront TechCenter >
> 
> 
Cloudmark Scanning Blocking Overzealous?

الإجابة Cloudmark Scanning Blocking Overzealous?

  • Wednesday, October 10, 2012 11:23 PM
     
     
    Sign In to Vote
    0

    We are running FPE 2010 on our Exchange 2010 Edge and are having an issue with CloudMark blocking what appears to be Outlook Express related messages; it is not consistent, but the blocks are numerous. From digging around the Forums and Google there appears to be an issue with the way that Outlook Express "closes" an email message that CloudMark then considers to be SPAM. The error that the sender is getting is as follows:

    550
        5.7.1 Message rejected due to content restrictions (in reply to end of DATA command)

    Does anyone have any insight into this?

    One other item of note is that we use FOPE as our Primary Filter and then FPE as the secondary, which provides further filtering and protects outbound mail as well. The only reason I mention this is if perhaps FOPE could be causing the "end of data command" issues. I don't think that is the case, but thought I would include the info incase.

    Thanks in advance for any help with this.

    Sean

     

All Replies

  • Thursday, October 11, 2012 7:42 AM
     
     
    Sign In to Vote
    0

    Hi,

    this problem seems to be very specific and I think the best way to fix this issue is to open a case with Microsoft.

    Greetings

    Christian

    Christian Groebner MVP Forefront

     
  • Thursday, October 11, 2012 8:47 PM
     
     
    Sign In to Vote
    0

    ok, I will do so, thank you.

    In the meantime is anyone else seeing this Bounce-Back error?

    5.7.1 Message rejected due to content restrictions (in reply to end of DATA command)

    Sean

     
  • Thursday, October 11, 2012 11:30 PM
     
     Answered
    Sign In to Vote
    0

    Please consider this solved...

    I did some further Internet research and found the the FPE logs contain much more information than the generic "message has been filtered" error shown above. It turns out that Cloudmark is doing exactly as intended and rejecting messages with an SCL of 9 or higher. The GUI just doesn't seem to show that information.

    Thanks for taking the time to review.

    Sean

     
  • Sunday, November 18, 2012 8:49 AM
     
     
    Sign In to Vote
    0

     I am facing the same exact error but on the FOPE side, when i go to tools message trace i can see 

    Delivery result:

    Bounced: host domain-127963-mail1.customer.frontbridge.com[x.x.x.x] said: 550 5.7.1 Message rejected due to content restrictions (in reply to end of DATA comma

    i have made a policy rule to enable all incoming emails from this domain, but still the issue is there.

    if anyone can help me on this i will appreciate it.

     
  • Sunday, November 18, 2012 8:56 AM
     
     
    Sign In to Vote
    0

    Hi,

    allow rules will be processed first in FOPE so the rule should work. Make sure to wait round about 1 hour until the rule is replicated over all datacenters and the rule gets active over all datacenters.

    Greetings

    Christian

    Christian Groebner MVP Forefront