Van's FSS/Antigen/EOP Blog

My Blog for all Antigen/Forefront Server and Forefront Online Protection for Exchange issues

Forefront protection for exchange blocks Outlook block sender functionality and Exchange IMF

Forefront protection for exchange blocks Outlook block sender functionality and Exchange IMF

  • Comments 2
  • Likes

I would recommend FPE customers do this.

By default when our Anti-spam agent finds something as clean we mark it SCL -1

This can cause a lot of issues with Exchange Blocked senders and it also blocks out any chance of IMF catching something.

This is covered in the Important notes section of our documentation.

  • FPE marks messages that it believes to be legitimate with an SCL rating of -1. As a result, on Exchange Server 2007, the end user blocked senders feature may not be enforced for these messages. If this occurs, as a workaround, you can set the extended option CFAllowBlockedSenders to 'true'. This changes the SCL rating from -1 to 0 and allows Exchange Server 2007 to enforce the end user blocked senders feature.  

The workaround is to change our clean scl stamp to 0

This is done in our power shell.

You need to create a new extended option:

 

PS> New-FseExtendedOption –Name CFAllowBlockedSenders –Value true

PS> Get-FseExtendedOption –Name CFAllowBlockedSenders

should return:

Name                                                    Value

-------                                                    -------   

CFAllowBlockedSenders              True

Comments
  • Hi,

    is there equivavalent for FPE 2010?

    [PS] > Get-FseExtendedOption –Name CFAllowBlockedSenders

    Get-FseExtendedOption : The extended option 'CFAllowBlockedSenders' does not exist

  • by default it is not there you have to create it first

    New-FseExtendedOption –Name CFAllowBlockedSenders –Value true

    thanks

Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment