Answered by:
5.7.1 Message rejected as spam by Content Filtering.

Question
-
Good Morning,
Have a company that is trying to blast out infomation to a client via email. Mail is getting held up with an error:
5.7.1 Message rejected as spam by Content Filtering.
Anyone know where this is getting caught on the mail server? I am looking in the EAC and the malware filter is set to Lowest. Client has Mimecast, but they are saying it is being blocked by the server and not them.
Any info is appreciated. Thanks!
Wednesday, November 27, 2019 1:49 PM
Answers
-
Hi mdavis3995,
According to the error message, the problematic emails are blocked by the content filter. To understand more about the issue, I’d like to confirm the following information:
1. Does the problematic has some similar content?
2. Does the error happen on regular senders and recipient?I recommend you to start from seeing the content filtering settings on your server. Run the command Get-ContentFilterConfig to check if you have configured content filtering with some custom words. If there are custom words, I recommend you remove all custom words to check the result.
If the issue persists, please add the address of the company as BypassedSenders to check the result.
For details, you can refer to this article, https://docs.microsoft.com/en-us/exchange/antispam-and-antimalware/antispam-protection/content-filtering-procedures?view=exchserver-2019
Regards,
Beverly Gao
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
- Proposed as answer by Beverly GaoMicrosoft contingent staff Friday, November 29, 2019 1:18 AM
- Marked as answer by Edward van BiljonMVP Sunday, December 1, 2019 6:08 PM
Thursday, November 28, 2019 3:06 AM
All replies
-
Hi mdavis3995,
According to the error message, the problematic emails are blocked by the content filter. To understand more about the issue, I’d like to confirm the following information:
1. Does the problematic has some similar content?
2. Does the error happen on regular senders and recipient?I recommend you to start from seeing the content filtering settings on your server. Run the command Get-ContentFilterConfig to check if you have configured content filtering with some custom words. If there are custom words, I recommend you remove all custom words to check the result.
If the issue persists, please add the address of the company as BypassedSenders to check the result.
For details, you can refer to this article, https://docs.microsoft.com/en-us/exchange/antispam-and-antimalware/antispam-protection/content-filtering-procedures?view=exchserver-2019
Regards,
Beverly Gao
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
- Proposed as answer by Beverly GaoMicrosoft contingent staff Friday, November 29, 2019 1:18 AM
- Marked as answer by Edward van BiljonMVP Sunday, December 1, 2019 6:08 PM
Thursday, November 28, 2019 3:06 AM -
Details available in this,
Please analyse header of that email. Check SCL value.
Analyze header --> https://mha.azurewebsites.net/
https://practical365.com/exchange-server/how-to-read-email-message-headers/
You can get a trace report and analyze the incident...
Then you can configure spam filter correct way,
https://docs.microsoft.com/en-us/exchange/spam-confidence-level-threshold-exchange-2013-help
https://docs.microsoft.com/en-us/exchange/content-filtering-exchange-2013-help
https://docs.microsoft.com/en-us/exchange/manage-content-filtering-exchange-2013-help
You can add that sender into bypass list as Beverly Gao said.
Thursday, November 28, 2019 3:16 AM -
The problematic email is all the same. It's a blast out from an Insurance company. Happening to all recipients/senders. This is what I see in a delivery report in EAC.
Monday, December 2, 2019 3:04 PM