Hi,When somebody is trying to mail to us using gmail they are getting bounce back message like this -->Google tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550 5.7.1 Message rejected due to content restriction (state 18).We are using forefront and microsoft antispam solution only.How can i check by which filter the mails are being rejected. They are rejected due to ip address reputation or what. And how can I overcome this problem.A very simple mail like test is also rejected. Yahoo and other mails are coming to my inbox wihtout any problems.Thanks.

The issue can be caused by the message does not have the privileges required to complete delivery or its blocked by something. So please check you anti-spam settings and deliver restriction settings. You can also try to add the sender to a white list in server and test the issue again. At the same time, please ask the sender send a test email without any content to see if he can reproduce the issue. Vinod |CCNA|MCSE 2003 +Messaging|MCTS|ITIL V3|

Hi, Thanks vinod. Actually i checked the transport logs and found that the messages are rejected due to the fact that there SCL rating is around 6. I am only sending mails with writing test in the subject. So nothing is there in the body. Also i tried to send it by some body text and this also gets blocked. Its happening for all the mails coming from gmail. Thanks.

HI, Please let us know is this issues effect only for one user or multiple users?Do you have configure SCL configuration for per user ?I would like to let you know, if you have configure per-recipient SCL threshold, the controller filter agent uses per per-recipient SCL threshold instead of the configuration of the content agent.Sametime please try to add gmail.com domain to content filtering whitelist,than you might able to bypass rejecting gmail.com domain.CMDletSet-ContentFilterConfig -BypassedSenderDomains gmail.comResourcesExchange 2007 Content FIlter: The Whitelist Is Here!Adjusting the Spam Confidence Level ThresholdRegards Chinthaka Shameera | MCITP: EA | MCSE: M | http://howtoexchange.wordpress.com/

Hi, I have not set the SCL on user level. They are only set on edge server role. And the problem is faced for every user in the organization. As far as whitelisting the domain is concerned I suspect that it might cause a lots of spam mails to inbox. The problem arises when i upgraded my anti-spam engines updated to 3.3.8. If I whitelist the domain gmail then no spam filtering will be done from the mails originating from that particular domain. Does it cause any ill effect (like spam mails trigerred with the gmail email accounts etc). Thanks.

HI,yep ,When you add gmail.com domain as trust , no email will scan and that might be open for spamers.do you have upgrade engeing on forefront ?if yes please post new post at forefront section as well.regards Chinthaka Shameera | MCITP: EA | MCSE: M | http://howtoexchange.wordpress.com/

Hi, Thanks Cinthaka. Acutally I said earlier, I have upgraded my anti-spam engine and forefront engines recently. And after the engine upgrade I am facing this problem. Also some of the hotmail mails are also bouncing back with same message. But the ratio is 50%. Out of 2 mails I am able to receive one mail and one get bounce back. Thanks.

Hi, What I am able to find now is that some of the mails are now going from gmail also. But as soon as any email from that particular account is blocked by our email server, the gmail server shows the bounce back of all the next mails without even attempting to connect to our server. As I am able to find this by the mail headers of the bounce back that the bounce back is not returned through our mail server ip but the gmail own private ips. Thanks.

Hi,I suggest we add the Gmail in the WhiteList to resolve this issue. Please understand that the inbound email to be scaned by the Anti-spam based on the below process:http://technet.microsoft.com/en-us/library/aa997242.aspxWhen the email passes the Connection Filtering, it still needs to be checked by the Sender ID Filtering. Thus, the spam email which fakes the gmail will be blocked in this phase.For the Sender ID feature, please refer to the below thread:http://social.technet.microsoft.com/forums/en-US/exchangesvrantivirusandantispam/thread/17d0d605-a049-4be2-b14a-29d996ec5211ThanksAllen

Hi, Thanks Allen. First of all for breaking my myth about anti-spam filtering mechanism. I thought that as soon as I add any domain to bypassedsenderdomains then it will bypass all anti-spam checks. And i was wrong as you said. Thanks.

Hi Allen, Is there any way by which I can specify my own actions like reject for fail spf. As default action for fail spf seems to be stamp and continue. I am able to see action can be set for temp error action and spoofed domain action. Thanks.

Hello Allen,SenderID filter set to "Reject". This should reject mail which failes SPFRegard,Krishnahttp://smtpport25.wordpress.com/