cancel
Showing results for 
Search instead for 
Did you mean: 
jbason
Level 7
Report Inappropriate Content
Message 1 of 3

MSME 8.1 sp1 some email in inbox does not contain spam score

I am receiving email in my inbox which are spam but they do not seem to have a spam score. They seem like they have somehow bypassed MSME.

I have in Gateway antispam setting add spam score indicator always and attached spam report always.

Some messages that are not spam do have a spam report details in the header for example the one below but some (the one that is spam) have no mention of NAI

X-MS-Exchange-Organization-Network-Message-Id: 02d4da4b-5b07-480c-d2e7-08d41f78125d

X-NAI-Spam-Flag: NO

X-NAI-Spam-Level:

X-NAI-Spam-Threshold: 4

X-NAI-Spam-Score: 0.5

X-NAI-Spam-Rules: 6 Rules triggered

  DTP_2WD=0.2, TRK_NCM1=0.2, THREAD_INDX_INVALD_VAL=0.1, EDT_SDHA_ADR_FRG=0,

  EDT_SDHA_DMN_FRG=0, RV5882=0

X-NAI-Spam-Version: 2.2.0.9309 : core <5882> : inlines <5548> : streams

<1723771> : uri <2337881>

X-MS-Exchange-Organization-AVStamp-Enterprise: 1.0

X-MS-Exchange-Organization-AuthSource: SAM-EX-01.seven.sevenasset.co.uk

X-MS-Exchange-Organization-AuthAs: Anonymous

Thanks for your help, jbason.

2 Replies
Reliable Contributor Aidan
Reliable Contributor
Report Inappropriate Content
Message 2 of 3

Re: MSME 8.1 sp1 some email in inbox does not contain spam score

If outlook is pulling mail from multiple sources (e.g. additional accounts like pop/imap) - only the mail coming from an external source through Exchange Server will have possibility to get scanned for spam. 

Internal mails are not scanned for spam.

AntiSpam settings gives option for when to attach spam report (and whether verbose report or not) - unless "to all mail message" not all mail scanned for spam will get this.  

AntiSpam advanced settings has a setting for max mail size presented to spam engine - default is 250KB. (if using default then a mail item at overall size 275KB

is not even presented to spam engine therefore not scanned and therefore cannot be marked)

jbason
Level 7
Report Inappropriate Content
Message 3 of 3

Re: MSME 8.1 sp1 some email in inbox does not contain spam score

The mail that does not seem to have been scanned has a attachment of 200kb so I will increase the maximum size to 500kb and see if that helps.

More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support

    • Download the new ePolicy Orchestrator (ePO) Support Center Extension which simplifies ePO management and provides support resources directly in the console. Learn more about ePO Support Center