[SOLVED] Message rejected as spam by Content Filtering

[Ali-istif]

hi,
We have pmg.Some person send an email to us but this email accepted/bounced.
when i check the log writing ;
Message rejected as spam by Content Filtering

i want to the Pmg send to them spam quarantine section. i want to check and deliver to my client.
What i can do for this?

 

[mira]

Please provide the complete log for that mail. You can find it if you expand that mail in the `Tracking Center`.

 

[Ali-istif]

hi,
Please check.
Jun 29 13:02:39 mailgateway postfix/smtpd[2246]: connect from mail-vi1eur05on2054.outbound.protection.outlook.com[40.107.21.54]
Jun 29 13:02:40 mailgateway postfix/smtpd[2246]: 37230380254: client=mail-vi1eur05on2054.outbound.protection.outlook.com[40.107.21.54]
Jun 29 13:02:40 mailgateway postfix/cleanup[2254]: 37230380254: message-id=<VI1PR02MB63519604203724542E329CF8BF039@VI1PR02MB6351.eurprd02.prod.outlook.com>
Jun 29 13:02:40 mailgateway postfix/qmgr[19060]: 37230380254: from=<ferhat.canturk@ozver.com.tr>, size=28383, nrcpt=1 (queue active)
Jun 29 13:02:40 mailgateway pmg-smtp-filter[1975]: 38136860DAEFC057CC4: new mail message-id=<VI1PR02MB63519604203724542E329CF8BF039@VI1PR02MB6351.eurprd02.prod.outlook.com>#012
Jun 29 13:02:40 mailgateway postfix/smtpd[2246]: disconnect from mail-vi1eur05on2054.outbound.protection.outlook.com[40.107.21.54] ehlo=2 starttls=1 mail=1 rcpt=1 bdat=1 quit=1 commands=7
Jun 29 13:02:44 mailgateway pmg-smtp-filter[1975]: 38136860DAEFC057CC4: SA score=0/5 time=3.829 bayes=0.00 autolearn=no autolearn_force=no hits=AWL(0.764),BAYES_00(-1.9),DKIM_SIGNED(0.1),DKIM_VALID(-0.1),FORGED_SPF_HELO(1),KAM_DMARC_NONE(0.25),MSGID_FROM_MTA_HEADER(0.001),RCVD_IN_DNSWL_LOW(-0.7),RCVD_IN_MSPIKE_H2(-0.001),SPF_HELO_PASS(-0.001),SPF_NONE(0.001)
Jun 29 13:02:44 mailgateway postfix/smtpd[2259]: connect from localhost.localdomain[127.0.0.1]
Jun 29 13:02:44 mailgateway postfix/smtpd[2259]: 36AB43814C6: client=localhost.localdomain[127.0.0.1], orig_client=mail-vi1eur05on2054.outbound.protection.outlook.com[40.107.21.54]
Jun 29 13:02:44 mailgateway postfix/cleanup[2254]: 36AB43814C6: message-id=<VI1PR02MB63519604203724542E329CF8BF039@VI1PR02MB6351.eurprd02.prod.outlook.com>
Jun 29 13:02:44 mailgateway postfix/qmgr[19060]: 36AB43814C6: from=<ferhat.canturk@ozver.com.tr>, size=29454, nrcpt=1 (queue active)
Jun 29 13:02:44 mailgateway postfix/smtpd[2259]: disconnect from localhost.localdomain[127.0.0.1] ehlo=1 xforward=1 mail=1 rcpt=1 data=1 commands=5
Jun 29 13:02:44 mailgateway pmg-smtp-filter[1975]: 38136860DAEFC057CC4: accept mail to <ERKAN@xxxELEKTRONIK.NET> (36AB43814C6) (rule: default-accept)
Jun 29 13:02:44 mailgateway pmg-smtp-filter[1975]: 38136860DAEFC057CC4: processing time: 3.911 seconds (3.829, 0.022, 0)
Jun 29 13:02:44 mailgateway postfix/lmtp[2255]: 37230380254: to=<ERKAN@xxxLEKTRONIK.NET>, relay=127.0.0.1[127.0.0.1]:10024, delay=4.2, delays=0.24/0/0/3.9, dsn=2.5.0, status=sent (250 2.5.0 OK (38136860DAEFC057CC4))
Jun 29 13:02:44 mailgateway postfix/qmgr[19060]: 37230380254: removed
Jun 29 13:02:45 mailgateway postfix/smtp[2260]: 36AB43814C6: to=<ERKAN@xxxLEKTRONIK.NET>, relay=192.168.53.xxx[192.168.53.xxx]:25, delay=1.2, delays=0.05/0/0.01/1.1, dsn=5.7.1, status=bounced (host 192.168.53.xxx[192.168.53.xxx] said: 550 5.7.1 Message rejected as spam by Content Filtering. (in reply to end of DATA command))
Jun 29 13:02:45 mailgateway postfix/qmgr[19060]: 36AB43814C6: removed

 

[mira]

Looks like your downstream server rejected the mail. PMG accepted the mail and then tried to deliver it to the downstream server which did not accept it.
Here PMG accepts it.

Jun 29 13:02:44 mailgateway pmg-smtp-filter[1975]: 38136860DAEFC057CC4: accept mail to <ERKAN@xxxELEKTRONIK.NET> (36AB43814C6) (rule: default-accept)

Here you can see that PMG tries to deliver it to the downstream server, but it gets rejected by the downstream server.

Jun 29 13:02:45 mailgateway postfix/smtp[2260]: 36AB43814C6: to=<ERKAN@xxxLEKTRONIK.NET>, relay=192.168.53.xxx[192.168.53.xxx]:25, delay=1.2, delays=0.05/0/0.01/1.1, dsn=5.7.1, status=bounced (host 192.168.53.xxx[192.168.53.xxx] said: 550 5.7.1 Message rejected as spam by Content Filtering. (in reply to end of DATA command))

 

[Ali-istif]

hi,
Thanks for reply.
yes i saw.What i can do for this problem?

 

[mira]

Change your downstream server so that it doesn't bounce those emails.
According to the following log entry it isn't recognized as spam by PMG:
Jun 29 13:02:44 mailgateway pmg-smtp-filter[1975]: 38136860DAEFC057CC4: SA score=0/5 time=3.829 bayes=0.00 autolearn=no autolearn_force=no hits=AWL(0.764),BAYES_00(-1.9),DKIM_SIGNED(0.1),DKIM_VALID(-0.1),FORGED_SPF_HELO(1),KAM_DMARC_NONE(0.25),MSGID_FROM_MTA_HEADER(0.001),RCVD_IN_DNSWL_LOW(-0.7),RCVD_IN_MSPIKE_H2(-0.001),SPF_HELO_PASS(-0.001),SPF_NONE(0.001)

So maybe check to see what the 'Content Filtering' of your downstream server recognizes as spam in that mail.

 

[Ali-istif]

hi,
Thanks a lot i will check it.