Exchange 2010 with Forefront stripping body of email
I have the oddest thing occur, emails from ONE domain are being sometimes stripped of body, my infrastructure is 2 CAS/HUB, 2 DB, 2 edges with Forefront on them. My forefront is configured with Content Filtering Enabled but this domain is WHITELISTED on the allowed domains tab. Below are the interesting part of headers: X-MS-Exchange-Organization-PRD: sample.com Received-SPF: SoftFail (MYEDGESERVER.local.edge: domain of transitioning user@sample.com discourages use of XXX.XXX.XXX.XXX as permitted sender)
July 18th, 2012 10:24am

Just to isolate if it's a malformed header alignment, see if you can forward one of those messages to an outside account ie. your hotmail and see if the message body shows up. Also check if OWA renders it. I doubt it's forefront.James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
July 18th, 2012 10:39am

I have done the exact, the email is still shows EMPTY in the outside (google.com) and empty on OWA.Vladimir
July 18th, 2012 10:43am

What third party outlook plug ins if any? Archiving, AV?James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
July 18th, 2012 10:58am

I have a cloud service APPRIVER, but I was able to rule the stripping out, by troubleshooting with them, they were getting emails with body, but when it went thru my exchange, it stripped it. No AV on any exchange boxes, no archiving either. No plug ins on outlook either, AV= Microsoft essentials.Vladimir
July 18th, 2012 11:42am

go ahead and enable pipeline tracing it will at what point it still has body content whether before or after it hits the mailbox. http://technet.microsoft.com/en-us/library/bb125198(EXCHG.80).aspxJames Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
July 18th, 2012 2:08pm

The issue was with Oranization Configuration--> Hub Transport -->Transport Rule. Due to the fact I have 2 exactly identical CAS/HUBT (failovers), they must have identical transport rules, otherwise you will get intermittent issues like I did. Once the Transport rules were identical, all is flowing as designed. Thank you all for pointing me in the right direction. Vladimir
July 18th, 2012 4:17pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics