Spam filter on Exchange 2007

Hi

We're getting some of our mail delivered to spam folder on Exchange 2007.
Mail that is delivered to defined spam/quarantine mailbox is sent from a
legitime addresses outside our company. Mail message has only a hyperlink in
a mail body or a few words like "Hello,call me"...
It looks like Exchange is asuming that these are spam messages and it
quarantines them. If I set Quarantine messages SCL to greater than 7, then
quite a lot of real spam is not detected, so I'm wondering if there are any
other settings that could be set.

I have SCL rating set as follows:
- Delete messages SCL 9
- Reject messages - disabled
- Quarantine messages SCL 7
- SCLJunkThreshold 5

Regards,Miha

On Wed, 20 Aug 2008 11:27:03 +0200, "Miha" <miha.bernik@email.si>
wrote:

>Hi
>
>We're getting some of our mail delivered to spam folder on Exchange 2007.
>Mail that is delivered to defined spam/quarantine mailbox is sent from a
>legitime addresses outside our company. Mail message has only a hyperlink in
>a mail body or a few words like "Hello,call me"...
>It looks like Exchange is asuming that these are spam messages and it
>quarantines them.

Well, if it /looks/ like spam it'll be handles as spam. Messages with
the content you used as an example sure look a lot like the stuff send
by Storm.

>If I set Quarantine messages SCL to greater than 7, then
>quite a lot of real spam is not detected, so I'm wondering if there are any
>other settings that could be set.

Sure . . . inform the people sending the email to use IM if that's
their intention. Otherwise, add some content to the message body.

Or you can try this:
http://exchangepedia.com/blog/2007/0...whitelist.html
---
Rich Matheisen
MCSE+I, Exchange MVP

On Wed, 20 Aug 2008 11:27:03 +0200, "Miha" <miha.bernik@email.si>
wrote:

>Hi
>
>We're getting some of our mail delivered to spam folder on Exchange 2007.
>Mail that is delivered to defined spam/quarantine mailbox is sent from a
>legitime addresses outside our company. Mail message has only a hyperlink in
>a mail body or a few words like "Hello,call me"...
>It looks like Exchange is asuming that these are spam messages and it
>quarantines them.

Well, if it /looks/ like spam it'll be handles as spam. Messages with
the content you used as an example sure look a lot like the stuff send
by Storm.

>If I set Quarantine messages SCL to greater than 7, then
>quite a lot of real spam is not detected, so I'm wondering if there are any
>other settings that could be set.

Sure . . . inform the people sending the email to use IM if that's
their intention. Otherwise, add some content to the message body.

Or you can try this:
http://exchangepedia.com/blog/2007/0...whitelist.html
---
Rich Matheisen
MCSE+I, Exchange MVP

Thanks. Looks like this is the only way to put senders into whitelist.
Regards,Miha

"Rich Matheisen [MVP]" <richnews@rmcons.com.NOSPAM.COM> wrote in message
news:hcgpa4tdkm7do64ten2q8ngsm7913ci88k@4ax.com...
> On Wed, 20 Aug 2008 11:27:03 +0200, "Miha" <miha.bernik@email.si>
> wrote:
>
>>Hi
>>
>>We're getting some of our mail delivered to spam folder on Exchange 2007.
>>Mail that is delivered to defined spam/quarantine mailbox is sent from a
>>legitime addresses outside our company. Mail message has only a hyperlink
>>in
>>a mail body or a few words like "Hello,call me"...
>>It looks like Exchange is asuming that these are spam messages and it
>>quarantines them.
>
> Well, if it /looks/ like spam it'll be handles as spam. Messages with
> the content you used as an example sure look a lot like the stuff send
> by Storm.
>
>>If I set Quarantine messages SCL to greater than 7, then
>>quite a lot of real spam is not detected, so I'm wondering if there are
>>any
>>other settings that could be set.
>
> Sure . . . inform the people sending the email to use IM if that's
> their intention. Otherwise, add some content to the message body.
>
> Or you can try this:
> http://exchangepedia.com/blog/2007/0...whitelist.html
> ---
> Rich Matheisen
> MCSE+I, Exchange MVP

Thanks. Looks like this is the only way to put senders into whitelist.
Regards,Miha

"Rich Matheisen [MVP]" <richnews@rmcons.com.NOSPAM.COM> wrote in message
news:hcgpa4tdkm7do64ten2q8ngsm7913ci88k@4ax.com...
> On Wed, 20 Aug 2008 11:27:03 +0200, "Miha" <miha.bernik@email.si>
> wrote:
>
>>Hi
>>
>>We're getting some of our mail delivered to spam folder on Exchange 2007.
>>Mail that is delivered to defined spam/quarantine mailbox is sent from a
>>legitime addresses outside our company. Mail message has only a hyperlink
>>in
>>a mail body or a few words like "Hello,call me"...
>>It looks like Exchange is asuming that these are spam messages and it
>>quarantines them.
>
> Well, if it /looks/ like spam it'll be handles as spam. Messages with
> the content you used as an example sure look a lot like the stuff send
> by Storm.
>
>>If I set Quarantine messages SCL to greater than 7, then
>>quite a lot of real spam is not detected, so I'm wondering if there are
>>any
>>other settings that could be set.
>
> Sure . . . inform the people sending the email to use IM if that's
> their intention. Otherwise, add some content to the message body.
>
> Or you can try this:
> http://exchangepedia.com/blog/2007/0...whitelist.html
> ---
> Rich Matheisen
> MCSE+I, Exchange MVP