none
Exchange 2007 Edge server的附件篩選設定 RRS feed

  • 問題

  • 請問各位,

    在一個有edge server存在的 Exchange 2007環境中,

    寄附帶加了密碼的壓縮zip檔案的信出去,會立刻被退件,

    NDR的內容如下:

    ===

    傳送至下列收件者或通訊群組清單失敗:

    由於安全性原則的關係,您的郵件並未傳遞。Microsoft Exchange 不會嘗試重新傳遞此郵件。請將下列診斷文字提供給您的系統管理員。

    下列組織已拒絕您的郵件: edge.xxx.xxx.com.tw

     

    系統管理員的診斷資訊:

    產生的伺服器: CAS.xxx.xxx.com.tw

    xxxxx@gmail.com

    edge.xxx.xxx.com.tw #550 5.7.1 Message rejected due to unacceptable attachments ##

    ===

     

    我想應該是attachment filter的關係,因此在edge上利用Get-AttachmentFilterEntry來查看,

    發現預設設定並未對ZIP類型的檔案有篩選的動作,

    但是信件確實會edge server被擋下來,請問除了這個attachment filter,

    還有其他設定會針對加密的附件檔案做篩選嗎?

     

    PS. Forefront security for Exchange的設定中,已將"刪除加密的檔案"選項給disable.

    2007年10月19日 上午 09:45

解答

  • 謝謝Jammy幫我想這麼多可能問題,

    不過現在真相大白,透過KB936734得知,這是Exchange server的"已知問題",

    目前已有解決方式,就是安裝剛出爐的Exchange Update rollup 5,

    可以參考一下下面的說明...

     

    =====================================================================================

    You receive an NDR message after you send an e-mail message that contains a .zip file attachment by using an Exchange 2007 Edge server

    Article ID : 936734
    Last Review : October 30, 2007
    Revision : 1.2

    SYMPTOMS

    After you send an e-mail message by using a Microsoft Exchange Server 2007 Edge server, you receive a non-delivery report (NDR) message that includes the following information:
     
    550 5.7.1 Message rejected due to unacceptable attachments
     
    This problem occurs if the following conditions are true:
    The e-mail message contains a .zip file attachment.
    The Attachment Filtering agent is enabled on the Exchange 2007 Edge server.
    If you enable tracing for Exchange 2007, an exception exists. This exception indicates that the .zip file attachment is invalid. However, you can correctly open the attached .zip file.

    CAUSE

    This problem occurs because the Attachment Filtering agent cannot correctly parse certain .zip files. In these .zip files, the compressed size is not computed and then set before the file data.

    RESOLUTION

    To resolve this problem, install Update Rollup 5 for Exchange 2007.

     

    2007年11月1日 上午 02:46

所有回覆

  • 建議你可以建另一條Send Connector並且不要透過Edge Server做傳送看是否會有相同的問題

    另我如果沒有記錯是可以針對個別的Filter做Disable的動作

    找到了,Cmdlet如下

    Disable-TransportAgent -Identity "Attachment Filtering Agent"

    2007年10月24日 下午 02:49
  • 經過測試,不透過edge server即不會有被退信的情況,

    收件者也可以順利收到完整附帶檔案的信,

    所以的確是被edge server的filter擋下來。

     

    但是我並不打算disable掉整個Attachment Filter,

    只是想要把針對加密zip檔刪除的這個filter規則給排除掉,

    我的問題是─

    要怎麼排除這條規則,而不關閉整個attachment filter?

     

    謝謝~

     

     

    2007年10月25日 上午 07:51
  • 可以試試看用Remove-AttachmentFilterEntry Cmdlet來移除看看

    http://technet.microsoft.com/en-us/library/bb123520.aspx

    2007年10月29日 下午 04:19
  • 謝謝Jammy幫我想這麼多可能問題,

    不過現在真相大白,透過KB936734得知,這是Exchange server的"已知問題",

    目前已有解決方式,就是安裝剛出爐的Exchange Update rollup 5,

    可以參考一下下面的說明...

     

    =====================================================================================

    You receive an NDR message after you send an e-mail message that contains a .zip file attachment by using an Exchange 2007 Edge server

    Article ID : 936734
    Last Review : October 30, 2007
    Revision : 1.2

    SYMPTOMS

    After you send an e-mail message by using a Microsoft Exchange Server 2007 Edge server, you receive a non-delivery report (NDR) message that includes the following information:
     
    550 5.7.1 Message rejected due to unacceptable attachments
     
    This problem occurs if the following conditions are true:
    The e-mail message contains a .zip file attachment.
    The Attachment Filtering agent is enabled on the Exchange 2007 Edge server.
    If you enable tracing for Exchange 2007, an exception exists. This exception indicates that the .zip file attachment is invalid. However, you can correctly open the attached .zip file.

    CAUSE

    This problem occurs because the Attachment Filtering agent cannot correctly parse certain .zip files. In these .zip files, the compressed size is not computed and then set before the file data.

    RESOLUTION

    To resolve this problem, install Update Rollup 5 for Exchange 2007.

     

    2007年11月1日 上午 02:46