Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 22 replies
  • Subscribers 1 subscriber
  • Views 17877 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Spam Filter blocking Out Of Office

stroppyjoe
Hi all,

Not to sure if I'm the only one with this problem (can't find any other threads on this), but the Email Spam filtering keeps blocking inbound and outbound "Out Of Office" messages. They are currently all being marked as Spam and need releasing from the quarantine. I've had a look through the Exceptions settings but cannot find a way to exempt emails containing "Out Of Office" to bypass the Spam Filtering. Any help would be greatly received. We are using the latest UTM 9 with the latest firmware installed.


This thread was automatically locked due to age.
Parents
  • 0
    Hi Bob,

    Sorry, my bad. Here is the Out of Office extracts from the actual SMTP log. I've change the logs so that my domain is now @mydomain.com and the remote domains are now @remotedomain.com:-

    <>mydomain.local> [InternalId=5349439] Qu"
    2012:08:22-16:02:12 SophosUTM exim-out[12062]: 2012-08-22 16:02:12 1T4CRe-00038W-EU Completed
    2012:08:22-16:02:17 SophosUTM exim-in[4785]: 2012-08-22 16:02:17 SMTP connection from [213.123.20.131]:19192 (TCP/IP connection count = 1)
    2012:08:22-16:02:18 SophosUTM exim-in[12073]: 2012-08-22 16:02:18 [213.123.20.131] F=<>remotedomain.co.uk> R=<>mydomain.com> Verifying recipient address with callout
    2012:08:22-16:02:19 SophosUTM exim-in[12073]: 2012-08-22 16:02:19 1T4CRm-00038j-2c ctasd reports 'Bulk' RefID:str=0001.0A090208.5034F47B.003E,ss=1,re=0.000,recu=0.000,reip=0.000,cl=3,cld=1,fgs=256
    2012:08:22-16:02:19 SophosUTM exim-in[12073]: 2012-08-22 16:02:19 1T4CRm-00038j-2c Greylisting: 213.123.20.131 is a known retry host
    2012:08:22-16:02:19 SophosUTM exim-in[12073]: 2012-08-22 16:02:19 1T4CRm-00038j-2c remotedomain.co.uk">Matt@remotedomain.co.uk H=c2bthomr13.btconnect.com (mail.btconnect.com) [213.123.20.131]:19192 P=esmtp S=3490 id=AFC4D3988E40C04FAC43AEF41C7477E7178743@afpsbs.remotedomain.local
    2012:08:22-16:02:20 SophosUTM smtpd[4697]: QMGR[4697]: 1T4CRm-00038j-2c moved to work queue
    2012:08:22-16:02:21 SophosUTM smtpd[12060]: SCANNER[12060]: 1T4CRp-00038W-5Q remotedomain.co.uk">matt@remotedomain.co.uk R=1T4CRm-00038j-2c P=INPUT S=1319
    2012:08:22-16:02:21 SophosUTM smtpd[12060]: SCANNER[12060]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="213.123.20.131" from="matt@remotedomain.co.uk" to="rogerw@mydomain.com" subject="Out of Office AutoReply: test5" queueid="1T4CRp-00038W-5Q" size="1319" reason="as" extra=""
    2012:08:22-16:02:21 SophosUTM smtpd[12060]: SCANNER[12060]: 1T4CRm-00038j-2c => work R=SCANNER T=SCANNER
    2012:08:22-16:02:21 SophosUTM smtpd[12060]: SCANNER[12060]: 1T4CRm-00038j-2c Completed
    2012:08:22-16:02:51 SophosUTM smtpd[12060]: SCANNER[12060]: Nothing to do, exiting.

    2012:08:22-16:03:50 SophosUTM smtpd[12195]: SCANNER[12195]: 1T4CTG-0003Ah-90 remotedomain.co.uk">matt@remotedomain.co.uk R=1T4CTA-0003AW-3C P=INPUT S=1318
    2012:08:22-16:03:50 SophosUTM smtpd[12195]: SCANNER[12195]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="213.123.20.131" from="matt@remotedomain.co.uk" to="support@mydomain.com" subject="Out of Office AutoReply: test" queueid="1T4CTG-0003Ah-90" size="1318" reason="as" extra=""
    2012:08:22-16:03:50 SophosUTM smtpd[12195]: SCANNER[12195]: 1T4CTA-0003AW-3C => work R=SCANNER T=SCANNER
    2012:08:22-16:03:50 SophosUTM smtpd[12195]: SCANNER[12195]: 1T4CTA-0003AW-3C Completed
    2012:08:22-16:03:50 SophosUTM exim-out[12197]

    2012:08:22-21:57:16 SophosUTM smtpd[27461]: SCANNER[27461]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="84.93.230.235" from="scott.bamford@remotedomain.co.uk" to="backup@mydomain.com" subject="Out of Office AutoReply: Backup Report [Successful] > Triangle > New Backup Set > Job 2012-08-22 (21:00) (no files backed up)" queueid="1T4HzI-00078v-2A" size="5946" reason="as" extra=""
    2012:08:22-21:57:16 SophosUTM smtpd[27461]: SCANNER[27461]: 1T4HzG-00079z-0x => work R=SCANNER T=SCANNER
    2012:08:22-21:57:16 SophosUTM smtpd[27461]: SCANNER[27461]: 1T4HzG-00079z-0x Completed
    2012:08:22-21:57:16 SophosUTM exim-in[27509]:
Reply
  • 0
    Hi Bob,

    Sorry, my bad. Here is the Out of Office extracts from the actual SMTP log. I've change the logs so that my domain is now @mydomain.com and the remote domains are now @remotedomain.com:-

    <>mydomain.local> [InternalId=5349439] Qu"
    2012:08:22-16:02:12 SophosUTM exim-out[12062]: 2012-08-22 16:02:12 1T4CRe-00038W-EU Completed
    2012:08:22-16:02:17 SophosUTM exim-in[4785]: 2012-08-22 16:02:17 SMTP connection from [213.123.20.131]:19192 (TCP/IP connection count = 1)
    2012:08:22-16:02:18 SophosUTM exim-in[12073]: 2012-08-22 16:02:18 [213.123.20.131] F=<>remotedomain.co.uk> R=<>mydomain.com> Verifying recipient address with callout
    2012:08:22-16:02:19 SophosUTM exim-in[12073]: 2012-08-22 16:02:19 1T4CRm-00038j-2c ctasd reports 'Bulk' RefID:str=0001.0A090208.5034F47B.003E,ss=1,re=0.000,recu=0.000,reip=0.000,cl=3,cld=1,fgs=256
    2012:08:22-16:02:19 SophosUTM exim-in[12073]: 2012-08-22 16:02:19 1T4CRm-00038j-2c Greylisting: 213.123.20.131 is a known retry host
    2012:08:22-16:02:19 SophosUTM exim-in[12073]: 2012-08-22 16:02:19 1T4CRm-00038j-2c remotedomain.co.uk">Matt@remotedomain.co.uk H=c2bthomr13.btconnect.com (mail.btconnect.com) [213.123.20.131]:19192 P=esmtp S=3490 id=AFC4D3988E40C04FAC43AEF41C7477E7178743@afpsbs.remotedomain.local
    2012:08:22-16:02:20 SophosUTM smtpd[4697]: QMGR[4697]: 1T4CRm-00038j-2c moved to work queue
    2012:08:22-16:02:21 SophosUTM smtpd[12060]: SCANNER[12060]: 1T4CRp-00038W-5Q remotedomain.co.uk">matt@remotedomain.co.uk R=1T4CRm-00038j-2c P=INPUT S=1319
    2012:08:22-16:02:21 SophosUTM smtpd[12060]: SCANNER[12060]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="213.123.20.131" from="matt@remotedomain.co.uk" to="rogerw@mydomain.com" subject="Out of Office AutoReply: test5" queueid="1T4CRp-00038W-5Q" size="1319" reason="as" extra=""
    2012:08:22-16:02:21 SophosUTM smtpd[12060]: SCANNER[12060]: 1T4CRm-00038j-2c => work R=SCANNER T=SCANNER
    2012:08:22-16:02:21 SophosUTM smtpd[12060]: SCANNER[12060]: 1T4CRm-00038j-2c Completed
    2012:08:22-16:02:51 SophosUTM smtpd[12060]: SCANNER[12060]: Nothing to do, exiting.

    2012:08:22-16:03:50 SophosUTM smtpd[12195]: SCANNER[12195]: 1T4CTG-0003Ah-90 remotedomain.co.uk">matt@remotedomain.co.uk R=1T4CTA-0003AW-3C P=INPUT S=1318
    2012:08:22-16:03:50 SophosUTM smtpd[12195]: SCANNER[12195]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="213.123.20.131" from="matt@remotedomain.co.uk" to="support@mydomain.com" subject="Out of Office AutoReply: test" queueid="1T4CTG-0003Ah-90" size="1318" reason="as" extra=""
    2012:08:22-16:03:50 SophosUTM smtpd[12195]: SCANNER[12195]: 1T4CTA-0003AW-3C => work R=SCANNER T=SCANNER
    2012:08:22-16:03:50 SophosUTM smtpd[12195]: SCANNER[12195]: 1T4CTA-0003AW-3C Completed
    2012:08:22-16:03:50 SophosUTM exim-out[12197]

    2012:08:22-21:57:16 SophosUTM smtpd[27461]: SCANNER[27461]: id="1001" severity="info" sys="SecureMail" sub="smtp" name="email quarantined" srcip="84.93.230.235" from="scott.bamford@remotedomain.co.uk" to="backup@mydomain.com" subject="Out of Office AutoReply: Backup Report [Successful] > Triangle > New Backup Set > Job 2012-08-22 (21:00) (no files backed up)" queueid="1T4HzI-00078v-2A" size="5946" reason="as" extra=""
    2012:08:22-21:57:16 SophosUTM smtpd[27461]: SCANNER[27461]: 1T4HzG-00079z-0x => work R=SCANNER T=SCANNER
    2012:08:22-21:57:16 SophosUTM smtpd[27461]: SCANNER[27461]: 1T4HzG-00079z-0x Completed
    2012:08:22-21:57:16 SophosUTM exim-in[27509]:
Children
No Data
Unfiltered HTML