Hello,

After a spate of dodgy file attachments we configured a filter to block all zip file attachments which is working correctly. Unfortunately there are a few addresses that send frequently during the day that we have tried to whitelist to no effect. We have configured the email address to be in "Configure Content Allow lists" section under the Antispam->Configure " and also in an allowed senders list in the filters/ filter lists.

Wehave then restarted the Transport service a number of times and also the server. 

The error message we continue to get is as below:ID: {511DF584-F632-4DB9-8487-9CA3F041E782}

Detection Time: 20/01/2014 20:11 
State: Removed
Incident Category: File filter
Incident Name: Blocked File types: *
File: plit.zip
Folder: SMTP Messages
Scan Job Name: Transport

Can anyone offer any ideas with this?

Many thanks for your time!

Hi,

It sounds odd, do you double check the rule?

Based on my knowledge, if you configure the IP into allow list, it would bypass the filter in FPE.

You try to upgrade to the latest version to see if the issue persists.

http://technet.microsoft.com/en-us/forefront/ff899332.aspx

Best Regards

Quan Gu

Hi Quan,

Thank you for your response. I have tried recreating the rule but it has not seemed have any effect.

I have run the update this morning as per your suggestion as it was out of date, but unfortunately it does not seem to have made a difference to the operation of the rule. 

Is there anything else you could recommend to try please?