I hope you can help, i am experiencing some false positives with cloudmark from gmail mainly which is put into quarantine. Now the only answer i see with cloudmark issues is to report them to microsoft, but is there some way i can let forefront bypass mail from gmail.com?
I tried it with a filter list bypassing gmail.com from sender domains but it doesn't seem to work.
the way i did it was at filter details i put in:
A the next page it says TARGET:
and at hub/edge transport scan i chose
action: skip detect
quarantine files : no
notifactions: never send notifications
Could anybody tell me if this is correct or should i do smth else?
a filterrule is the wrong place to whitelist the domain because they are processed later. You have to put the domains in the safelist of the contentfiler.
Check the follwoing article how to configure the whitelist for the contentfilter:
http://technet.microsoft.com/en-us/library/dd639396.aspx (Allowing e-mail from specific senders and sender domains to by-pass spam filtering)
Christian Groebner MVP Forefront