Hi guys.

We are dealing with RBL not working.

We have zen.spamhaus.org as one of the RBL's (priority 1).

This IP is reported as spam/blacklisted

http://mxtoolbox.com/SuperToolX.aspx?action=blacklist%3a38.68.18.194&run=toolpage

Is this result ok or not?

we also take a look that we don't have any DNS issues. We had exactly the same behavior as on this post "https://social.technet.microsoft.com/Forums/office/en-US/1252eb3d-949c-4cc3-a1d7-dc08f0bdd372/rbl-not-working-on-exchange-2013-edge-transport" but we have resolved this by changing forwarders on DNS and now it resolves just fine.

After that we have restarted transport service on Exchange 2013 EDGE.

Edge is on CU11.

Any other hints to check why RBL is not working ok?

With best regards

bostjanc

Dear All,

Server : Exchange Server 2010

Issue Description:

1) We have configured outlook in local PC.

2) For all users, when we are connecting it in Local LAN and Internet also it is prompting for passwords notification  every time when we open Outlook even after saving passwords locally.

Silvio Tavares - Analista de Sistemas

Hi,

I have an edge server that has an accepted domain: mydomain.com

I want to block spam of type user@mydomain.com being allowed through the edge server's anti-spam engine.

I know the easy way to do this is:

Get-ReceiveConnector “my receive connector” | Get-ADPermission -user “NT AUTHORITY\Anonymous Logon” | where {$_.ExtendedRights -like
“ms-exch-smtp-accept-authoritative-domain-sender”} | Remove-ADPermission

That works but the complication is that a couple of (legit) external services are sending email into our domain with email address like cloudprovider@vistek.ca. When I run the powershell above, email from those providers is blocked.

Is there a workaround? I was hoping that by adding the cloud providers domains to my SPF record by appending via something like "include:cloudprovider.com" it would allow that email, but that doesn't seem to be the case. The cloud provider can't do authenticated email either.

Is there a way I prevent spoofed domain emails from everyone but certain senders?

Thanks,

Hi,

I have new testing lab to play around with which is starting to drive me insane. I have exchange 2013 and outlook 2013. I can receive emails from external domains but I am unable to send emails internally or externally!

Now I would know what to look at if I couldn't send externally, But not being able to send internally has completed confused me!

anyone got any tips where to start troubleshooting for not being able to send internal mail? Once internal mail works I should then be able to get external mail working as well....

Thanks

Hi, if you could help me to resolve my issue here.

when I do following, this enables SPF validation and rejects spoofed emails. However this also starts to reject internal devices and application emails which are connecting to our Exchange server 2013 as Anonymous user.

Set-SenderIdConfig -SpoofedDomainAction Reject

I need to have our internal devices and applications emails working while rejecting spoofed emails from outside.

Its on Exchange Server 2013 environment.

Will appreciate if anyone can help. Thanks.

Hey everyone. Noticed a warning in my logs:

This warning is not the first one i have gotten like this. After some googling and then testing to verify, I determined that this occurs when trying to Accept a meeting invite that was sent by someone external to my company (say I am domain1.com, if someone @domain2.com sends me an invite, I will receive the invite but they will never see that I accepted it, although it WILL appear on my calendar as expected).

After some reading, it would appear that this is expected behavior:

http://msexchangeguru.com/2011/06/08/meeting-response/

But I would like to confirm that

• This is expected
• This cannot be changed

EDIT: I was actually able to accept a meeting from my test gmail account and my gmail account received the acceptance. There was no warning for this this time. So it would seem that this is only happening some of the time which has me scratching my head. Another user had the warning generated for them but then my spam filter reports it as having made it through the filter and out to the world. Then finally i found one case where it didn't seem that the meeting accept actually went through as there was no record for it on the spam filter. Any thoughts on this?

Please advise. Thanks guys!

Hi,

I have read a couple of S/MIME configuration guide.  It seems like more to clients side (outlook/OWA) configuration.  Nothing to do with server end.  Please correct me if I am wrong.

Kindly provide the steps-by-steps configuration guide.

If it is really on clients end, anyway to automate them?  Don't wish to visit every clients.  Possibly we could using Outlook policy template and roll out using GPO.  How about others client such as OWA, Mobile and etc.

Kelvin Teang

Receiving the email from outlook.com,hotmail.com but when trying to sending to any Hotmail,outlook account it got stuck on the queue but same i am doing with gmail both sending & receiving is working fine.even i have checked the blacklist as well as email reputations its also showing decent .

Can you guys help me out for this problem.

Abp

I have a simple web service and in the web service I have written a simple method as illustrated in the code below.

        [PrincipalPermission(SecurityAction.Demand, Role = @"KIANCOORP\SomethingElse Users U")]
        public string HelloWorld()
        {
            var msg = "Hello {0} from internal.".FormatWith(IdentityName);

            _log.Info(msg);

            return msg;
        }

I have hosted the web service in an app pool that is set to a Domain User KIANCOORP\webapppooluser, and I have added this user into the group of "KIANCOORP\SomethingElse Users U" (via active directory).

Now when I use an internet browser to browse to the web service I get the following prompt, so I try to log in with the same user that I have used to set as the app pool user for this HelloWorld web service of mine.

Now if I try to log in with the correct credentials, the prompt comes up again 

Its like I have to enter the credentials 3 times, I have tested this and everytime I have been prompted with the login dialog box I have to try 3 times and eventually it gets into the following browser screen.

If I go to the IIS logs this is what I will see.

System.ServiceModel Warning: 131076 : <TraceRecord xmlns="http://schemas.microsoft.com/2004/10/E2ETraceEvent/TraceRecord" Severity="Warning"><TraceIdentifier>http://msdn.microsoft.com/en-NZ/library/System.ServiceModel.Diagnostics.TraceHandledException.aspx</TraceIdentifier><Description>Handling an exception.</Description><AppDomain>/LM/W3SVC/3/ROOT-1-131164864670874625</AppDomain><Exception><ExceptionType>System.Security.SecurityException, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</ExceptionType><Message>Request for principal permission failed.</Message><StackTrace>   at System.Security.Permissions.PrincipalPermission.ThrowSecurityException()
   at System.Security.Permissions.PrincipalPermission.Demand()
   at System.Security.PermissionSet.DemandNonCAS()
   at KianService.HelloWorld() in C:\vso\SandBox\KianService.cs:line 81
   at SyncInvokeHelloWorld(Object , Object[] , Object[] )
   at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]&amp;amp; outputs)</StackTrace><ExceptionString>System.Security.SecurityException: Request for principal permission failed.
   at System.Security.Permissions.PrincipalPermission.ThrowSecurityException()
   at System.Security.Permissions.PrincipalPermission.Demand()
   at System.Security.PermissionSet.DemandNonCAS()
   at KianService.HelloWorld() in C:\vso\SandBox\KianService.cs:line 81
   at SyncInvokeHelloWorld(Object , Object[] , Object[] )
   at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]&amp;amp; outputs)
The action that failed was:
Demand
The type of the first permission that failed was:
System.Security.Permissions.PrincipalPermission
The first permission that failed was:&amp;lt;IPermission class="System.Security.Permissions.PrincipalPermission, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089"
version="1"&amp;gt;&amp;lt;Identity Authenticated="true"
Role="KIANCOORP\SomethingElse Users U"/&amp;gt;&amp;lt;/IPermission&amp;gt;

The demand was for:
&amp;lt;IPermission class="System.Security.Permissions.PrincipalPermission, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089"
version="1"&amp;gt;&amp;lt;Identity Authenticated="true"
Role="KIANCOORP\SomethingElse Users U"/&amp;gt;&amp;lt;/IPermission&amp;gt;

The assembly or AppDomain that failed was:
mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</ExceptionString></Exception></TraceRecord>
System.ServiceModel Error: 131075 : <TraceRecord xmlns="http://schemas.microsoft.com/2004/10/E2ETraceEvent/TraceRecord" Severity="Error"><TraceIdentifier>http://msdn.microsoft.com/en-NZ/library/System.ServiceModel.Diagnostics.ThrowingException.aspx</TraceIdentifier><Description>Throwing an exception.</Description><AppDomain>/LM/W3SVC/3/ROOT-1-131164864670874625</AppDomain><Exception><ExceptionType>System.ServiceModel.FaultException, System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</ExceptionType><Message>Access is denied.</Message><StackTrace>   at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]&amp;amp; outputs)
   at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc&amp;amp; rpc)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc&amp;amp; rpc)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(MessageRpc&amp;amp; rpc)
   at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)
   at System.ServiceModel.Dispatcher.ChannelHandler.DispatchAndReleasePump(RequestContext request, Boolean cleanThread, OperationContext currentOperationContext)
   at System.ServiceModel.Dispatcher.ChannelHandler.HandleRequest(RequestContext request, OperationContext currentOperationContext)
   at System.ServiceModel.Dispatcher.ChannelHandler.AsyncMessagePump(IAsyncResult result)
   at System.Runtime.Fx.AsyncThunk.UnhandledExceptionFrame(IAsyncResult result)
   at System.Runtime.AsyncResult.Complete(Boolean completedSynchronously)
   at System.Runtime.InputQueue`1.AsyncQueueReader.Set(Item item)
   at System.Runtime.InputQueue`1.EnqueueAndDispatch(Item item, Boolean canDispatchOnThisThread)
   at System.Runtime.InputQueue`1.EnqueueAndDispatch(T item, Action dequeuedCallback, Boolean canDispatchOnThisThread)
   at System.ServiceModel.Channels.SingletonChannelAcceptor`3.Enqueue(QueueItemType item, Action dequeuedCallback, Boolean canDispatchOnThisThread)
   at System.ServiceModel.Channels.HttpChannelListener.HttpContextReceived(HttpRequestContext context, Action callback)
   at System.ServiceModel.Activation.HostedHttpTransportManager.HttpContextReceived(HostedHttpRequestAsyncResult result)
   at System.ServiceModel.Activation.HostedHttpRequestAsyncResult.HandleRequest()
   at System.ServiceModel.Activation.HostedHttpRequestAsyncResult.BeginRequest()
   at System.ServiceModel.Activation.HostedHttpRequestAsyncResult.OnBeginRequest(Object state)
   at System.Runtime.IOThreadScheduler.ScheduledOverlapped.IOCallback(UInt32 errorCode, UInt32 numBytes, NativeOverlapped* nativeOverlapped)
   at System.Runtime.Fx.IOCompletionThunk.UnhandledExceptionFrame(UInt32 error, UInt32 bytesRead, NativeOverlapped* nativeOverlapped)
   at System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32 errorCode, UInt32 numBytes, NativeOverlapped* pOVERLAP)</StackTrace><ExceptionString>System.ServiceModel.FaultException: Access is denied.</ExceptionString></Exception></TraceRecord>
System.ServiceModel Information: 131076 : <TraceRecord xmlns="http://schemas.microsoft.com/2004/10/E2ETraceEvent/TraceRecord" Severity="Information"><TraceIdentifier>http://msdn.microsoft.com/en-NZ/library/System.ServiceModel.Diagnostics.TraceHandledException.aspx</TraceIdentifier><Description>Handling an exception.</Description><AppDomain>/LM/W3SVC/3/ROOT-1-131164864670874625</AppDomain><Exception><ExceptionType>System.ServiceModel.FaultException, System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</ExceptionType><Message>Access is denied.</Message><StackTrace>   at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]&amp;amp; outputs)
   at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc&amp;amp; rpc)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc&amp;amp; rpc)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(MessageRpc&amp;amp; rpc)
   at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)</StackTrace><ExceptionString>System.ServiceModel.FaultException: Access is denied.
   at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]&amp;amp; outputs)
   at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc&amp;amp; rpc)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc&amp;amp; rpc)
   at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(MessageRpc&amp;amp; rpc)
   at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)</ExceptionString></Exception></TraceRecord>

Yours Sincerely, Kian, Ting

Hey guys. I have been noticing for some time that occasionally I get error 4010:

Transport engine failed to evaluate condition due to Filtering Service error. The rule is configured to ignore errors. Details: 'Organization: '' Message ID '<ID@SERVER@DOMAIN.COM>' Rule ID '52b1774b-4a4c-4aba-ac8c-a3cb14f231ac' Predicate '' Action ''. FilteringServiceFailureException Error: Microsoft.Exchange.MessagingPolicies.Rules.FilteringServiceFailureException: FIPS text extraction failed with error: 'Scan request timed out: STREAMS

id: 0, parent: -1
name: "<e428b1cd53f64e3c88884d5354c4bbe1@SERVER@DOMAIN.COM>"
types: 
text: not available
properties:
 - Parsing::ParsingKeys::DepthLevel: 0
 - Parsing::ParsingKeys::StreamSize: 1864
 - ScanningPipeline::ElapsedTimeKeys::Parsing: 0

id: 1, parent: 0
name: "Message Body"
types: Html, Text
text: not available
properties:
 - Parsing::ConfigKeys::BypassTextTruncation: 01 00 00 00 00 00 00 00
 - Parsing::ParsingKeys::CharSet: 75 00 73 00 2D 00 61 00 73 00 63 00 69 00 69 00
 - Parsing::ParsingKeys::ContentType: text/html
 - Parsing::ParsingKeys::DepthLevel: 1
 - Parsing::ParsingKeys::MessageBody: True
 - Parsing::ParsingKeys::PreferredBody: True
 - Parsing::ParsingKeys::StreamSize: 8631
 - Parsing::ParsingKeys::Subject: FW: SUBJECT
 - ScanningPipeline::ElapsedTimeKeys::Parsing: 2
 - ScanningPipeline::ElapsedTimeKeys::TextExtraction: 2
 - ScanningPipeline::TextExtractionKeys::TextExtractionAdditionalInformation: 
 - ScanningPipeline::TextExtractionKeys::TextExtractionMethod: OutsideInModule
 - ScanningPipeline::TextExtractionKeys::TextExtractionResult: 2
 - UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
 - UnifiedContent::PropertyKeys::RawDataOffset: 08 00 00 00 00 00 00 00

id: 2, parent: 0
name: "image001.png"
types: Png
text: not available
properties:
 - Parsing::ParsingKeys::ContentType: image/png
 - Parsing::ParsingKeys::DepthLevel: 1
 - Parsing::ParsingKeys::StreamSize: 1182
 - Parsing::ParsingKeys::Subject: FW: SUBJECT
 - ScanningPipeline::ElapsedTimeKeys::Parsing: 1
 - ScanningPipeline::ElapsedTimeKeys::TextExtraction: 0
 - ScanningPipeline::TextExtractionKeys::TextExtractionAdditionalInformation: 
 - ScanningPipeline::TextExtractionKeys::TextExtractionResult: 1
 - UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
 - UnifiedContent::PropertyKeys::RawDataOffset: DB 21 00 00 00 00 00 00

id: 3, parent: 0
name: "image002.png"
types: Png
text: not available
properties:
 - Parsing::ParsingKeys::ContentType: image/png
 - Parsing::ParsingKeys::DepthLevel: 1
 - Parsing::ParsingKeys::StreamSize: 1129
 - Parsing::ParsingKeys::Subject: SUBJECT
 - ScanningPipeline::ElapsedTimeKeys::Parsing: 1
 - ScanningPipeline::ElapsedTimeKeys::TextExtraction: 0
 - ScanningPipeline::TextExtractionKeys::TextExtractionAdditionalInformation: 
 - ScanningPipeline::TextExtractionKeys::TextExtractionResult: 1
 - UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
 - UnifiedContent::PropertyKeys::RawDataOffset: 95 26 00 00 00 00 00 00

id: 4, parent: 0
name: "image003.png"
types: Png
text: not available
properties:
 - Parsing::ParsingKeys::ContentType: image/png
 - Parsing::ParsingKeys::DepthLevel: 1
 - Parsing::ParsingKeys::StreamSize: 4104
 - Parsing::ParsingKeys::Subject: FW: SUJECT
 - ScanningPipeline::ElapsedTimeKeys::Parsing: 1
 - ScanningPipeline::ElapsedTimeKeys::TextExtraction: 0
 - ScanningPipeline::TextExtractionKeys::TextExtractionAdditionalInformation: 
 - ScanningPipeline::TextExtractionKeys::TextExtractionResult: 1
 - UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
 - UnifiedContent::PropertyKeys::RawDataOffset: 1A 2B 00 00 00 00 00 00

id: 5, parent: 0
name: "image004.png"
types: Png
text: not available
properties:
 - Parsing::ParsingKeys::ContentType: image/png
 - Parsing::ParsingKeys::DepthLevel: 1
 - Parsing::ParsingKeys::StreamSize: 4449
 - Parsing::ParsingKeys::Subject: SUBJECT
 - ScanningPipeline::ElapsedTimeKeys::Parsing: 1
 - ScanningPipeline::ElapsedTimeKeys::TextExtraction: 0
 - ScanningPipeline::TextExtractionKeys::TextExtractionAdditionalInformation: 
 - ScanningPipeline::TextExtractionKeys::TextExtractionResult: 1
 - UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
 - UnifiedContent::PropertyKeys::RawDataOffset: 3E 3B 00 00 00 00 00 00

id: 6, parent: 0
name: "SPREADSHEET.xlsx"
types: XlsxOfficePackage, Zip
text: not available
properties:
 - Parsing::ParsingKeys::ContentType: application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
 - Parsing::ParsingKeys::DepthLevel: 1
 - Parsing::ParsingKeys::StreamSize: 635727
 - Parsing::ParsingKeys::Subject: SUBJECT
 - ScanningPipeline::ElapsedTimeKeys::Parsing: 2
 - ScanningPipeline::TextExtractionKeys::TextExtractionFailedModules: AdeModule
 - ScanningPipeline::TextExtractionKeys::TextExtractionMethod: OutsideInModule
 - UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
 - UnifiedContent::PropertyKeys::RawDataOffset: BB 4C 00 00 00 00 00 00

'. See inner exception for details ---> Microsoft.Filtering.ScanTimeoutException: Scan request timed out: STREAMS

id: 0, parent: -1
name: "<e428b1cd53f64e3c88884d5354c4bbe1@SERVER@DOMAIN.COM>"
types: 
text: not available
properties:
 - Parsing::ParsingKeys::DepthLevel: 0
 - Parsing::ParsingKeys::StreamSize: 1864
 - ScanningPipeline::ElapsedTimeKeys::Parsing: 0

id: 1, parent: 0
name: "Message Body"
types: Html, Text
text: not available
properties:
 - Parsing::ConfigKeys::BypassTextTruncation: 01 00 00 00 00 00 00 00
 - Parsing::ParsingKeys::CharSet: 75 00 73 00 2D 00 61 00 73 00 63 00 69 00 69 00
 - Parsing::ParsingKeys::ContentType: text/html
 - Parsing::ParsingKeys::DepthLevel: 1
 - Parsing::ParsingKeys::MessageBody: True
 - Parsing::ParsingKeys::PreferredBody: True
 - Parsing::ParsingKeys::StreamSize: 8631
 - Parsing::ParsingKeys::Subject: SUBJECT
 - ScanningPipeline::ElapsedTimeKeys::Parsing: 2
 - ScanningPipeline::ElapsedTimeKeys::TextExtraction: 2
 - ScanningPipeline::TextExtractionKeys::TextExtractionAdditionalInformation: 
 - ScanningPipeline::TextExtractionKeys::TextExtractionMethod: OutsideInModule
 - ScanningPipeline::TextExtractionKeys::TextExtractionResult: 2
 - UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
 - UnifiedContent::PropertyKeys::RawDataOffset: 08 00 00 00 00 00 00 00

id: 2, parent: 0
name: "image001.png"
types: Png
text: not available
properties:
 - Parsing::ParsingKeys::ContentType: image/png
 - Parsing::ParsingKeys::DepthLevel: 1
 - Parsing::ParsingKeys::StreamSize: 1182
 - Parsing::ParsingKeys::SUBJECT
 - ScanningPipeline::ElapsedTimeKeys::Parsing: 1
 - ScanningPipeline::ElapsedTimeKeys::TextExtraction: 0
 - ScanningPipeline::TextExtractionKeys::TextExtractionAdditionalInformation: 
 - ScanningPipeline::TextExtractionKeys::TextExtractionResult: 1
 - UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
 - UnifiedContent::PropertyKeys::RawDataOffset: DB 21 00 00 00 00 00 00

id: 3, parent: 0
name: "image002.png"
types: Png
text: not available
properties:
 - Parsing::ParsingKeys::ContentType: image/png
 - Parsing::ParsingKeys::DepthLevel: 1
 - Parsing::ParsingKeys::StreamSize: 1129
 - Parsing::ParsingKeys::Subject:SUBJECT
 - ScanningPipeline::ElapsedTimeKeys::Parsing: 1
 - ScanningPipeline::ElapsedTimeKeys::TextExtraction: 0
 - ScanningPipeline::TextExtractionKeys::TextExtractionAdditionalInformation: 
 - ScanningPipeline::TextExtractionKeys::TextExtractionResult: 1
 - UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
 - UnifiedContent::PropertyKeys::RawDataOffset: 95 26 00 00 00 00 00 00

id: 4, parent: 0
name: "image003.png"
types: Png
text: not available
properties:
 - Parsing::ParsingKeys::ContentType: image/png
 - Parsing::ParsingKeys::DepthLevel: 1
 - Parsing::ParsingKeys::StreamSize: 4104
 - Parsing::ParsingKeys::Subject: SUBJECT
 - ScanningPipeline::ElapsedTimeKeys::Parsing: 1
 - ScanningPipeline::ElapsedTimeKeys::TextExtraction: 0
 - ScanningPipeline::TextExtractionKeys::TextExtractionAdditionalInformation: 
 - ScanningPipeline::TextExtractionKeys::TextExtractionResult: 1
 - UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
 - UnifiedContent::PropertyKeys::RawDataOffset: 1A 2B 00 00 00 00 00 00

id: 5, parent: 0
name: "image004.png"
types: Png
text: not available
properties:
 - Parsing::ParsingKeys::ContentType: image/png
 - Parsing::ParsingKeys::DepthLevel: 1
 - Parsing::ParsingKeys::StreamSize: 4449
 - Parsing::ParsingKeys::SUBJECT
 - ScanningPipeline::ElapsedTimeKeys::Parsing: 1
 - ScanningPipeline::ElapsedTimeKeys::TextExtraction: 0
 - ScanningPipeline::TextExtractionKeys::TextExtractionAdditionalInformation: 
 - ScanningPipeline::TextExtractionKeys::TextExtractionResult: 1
 - UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
 - UnifiedContent::PropertyKeys::RawDataOffset: 3E 3B 00 00 00 00 00 00

id: 6, parent: 0
name: "SPREADSHEET.xlsx"
types: XlsxOfficePackage, Zip
text: not available
properties:
 - Parsing::ParsingKeys::ContentType: application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
 - Parsing::ParsingKeys::DepthLevel: 1
 - Parsing::ParsingKeys::StreamSize: 635727
 - Parsing::ParsingKeys::Subject: FW: SUBJECT
 - ScanningPipeline::ElapsedTimeKeys::Parsing: 2
 - ScanningPipeline::TextExtractionKeys::TextExtractionFailedModules: AdeModule
 - ScanningPipeline::TextExtractionKeys::TextExtractionMethod: OutsideInModule
 - UnifiedContent::PropertyKeys::ExtractedContentOffset: 00 00 00 00 00 00 00 00
 - UnifiedContent::PropertyKeys::RawDataOffset: BB 4C 00 00 00 00 00 00


   at Microsoft.Filtering.InteropUtils.ThrowPostScanErrorAsFilteringException(WSM_ReturnCode code, String message)
   at Microsoft.Filtering.FilteringService.EndScan(IAsyncResult ar)
   at Microsoft.Filtering.FipsDataStreamFilteringService.EndScan(IAsyncResult ar)
   at Microsoft.Exchange.MessagingPolicies.Rules.UnifiedContentServiceInvoker.TextExtractionComplete(IFipsDataStreamFilteringService textExtractionService, TextExtractionCompleteCallback textExtractionCompleteCallback, IAsyncResult asyncResult)
   --- End of inner exception stack trace ---
   at Microsoft.Exchange.MessagingPolicies.Rules.UnifiedContentServiceInvoker.GetUnifiedContentResults(FilteringServiceInvokerRequest filteringServiceInvokerRequest)
   at Microsoft.Exchange.MessagingPolicies.Rules.MailMessage.GetUnifiedContentResults()
   at Microsoft.Exchange.MessagingPolicies.Rules.MailMessage.GetAttachmentStreamIdentities()
   at Microsoft.Exchange.MessagingPolicies.Rules.MailMessage.GetAttachmentInfos()
   at Microsoft.Exchange.MessagingPolicies.Rules.MailMessage.get_AttachmentTypes()
   at Microsoft.Exchange.MessagingPolicies.Rules.MessageProperty.OnGetValue(RulesEvaluationContext baseContext)
   at Microsoft.Exchange.MessagingPolicies.Rules.Property.GetValue(RulesEvaluationContext context)
   at Microsoft.Exchange.MessagingPolicies.Rules.IsPredicate.Evaluate(RulesEvaluationContext context)
   at Microsoft.Exchange.MessagingPolicies.Rules.AndCondition.Evaluate(RulesEvaluationContext context)
   at Microsoft.Exchange.MessagingPolicies.Rules.RulesEvaluator.EvaluateCondition(Condition condition, RulesEvaluationContext evaluationContext)
   at Microsoft.Exchange.MessagingPolicies.Rules.TransportRulesEvaluator.EvaluateCondition(Condition condition, RulesEvaluationContext evaluationContext). Message-Id:<e428b1cd53f64e3c88884d5354c4bbe1@SERVER.DOMAIN.NET>'

This is always immediately followed by FIPS ERROR 2213:

A scan request timed out.  ID={9a44e9c5-c363-4d63-a1f1-529980224acb}, WorkloadID=<e428b1cd53f64e3c88884d5354c4bbe1@SERVER@DOMAIN.COM>, PID=31296

I have googled this and found one thread that was similar but was not exactly the same issue. Has anyone seen this before and does anyone know how I can resolve this?

Thanks!

Hi There,

I have a starage issue, some random emails are lost during the transmission, particularly while sending to external recipients, its a Exchange 2010+Hybrid environment.

When I trace that particular email, the last hob(HT server) that received the email did not relay the emails to its next hob(mail gateway server). My confusion is, this problem hapenning with any random emails(once in a week) and hapenning with any random HT server, I have 4 HT servers total, problem was identified in all the HT servers randomly.

1. Is there a chance that emails are stuck in any different queue? if yes how to check that?

when I trace using the following command I saw the above results, however i dont know how to locate if this is stuck in queue.
Get-MessageTrackingLog -Server "HTSrvName" -Start "08/24/2016 09:00:00" -End "08/24/2016 17:00:00" -Sender "john@contoso.com"

Hello All,

I have my Exchange 2013 server setup with a Journal mailbox.  I have all email Journaled to that mailbox.  I have a Barracuda Message Archiver setup to Secure POP into that mailbox and pull all email from it.

A very big problem I have found is that if a user on my server sends an email to USER1 (on my server) and BCC's USER2 (on my server), All USER1 has to do to see wh was BCC'd on the email is go into the archive, download a copy of the message and open it with Notepad.  There USER1 will see the BCC info.

I know this is unlikely that an end user has this knowledge to do this in the first place, but it was an end user that brought this to my attention.

Question:  Is there any way to strip the BCC info from the message once it is sent?  Maybe through a transport rule?  I need this for SEC compliance.

TIA.

Larry D.

Hi THere,

In one of my customer environment, their CAS servers are behind the coporate firewall, there are no ReverseProxy or HLB infront of the CAS servers, when the OA / OWA / AS clients connect from internet they connect via the corporate firewal.

In all my CAS servers, I see the SSL offloading option is unselected, this means SSL offloading is not configured in any of the CAS servers, also as I said earlier there are no ReverseProxy / HLB as well.

Is this configuration correct or wrong? I beleive there must be somewhere either in CAS or HLB ss-offloading has to be configured?

Hi,

We are unable to receive email from Live.com, outlook.com & hotmail.com to our server.

We can receive emails from other domains and its fine.

Is Microsoft is blocking if we configure Multiple accepted domains on Exchange Server ?

Becuase on our Exchange server we had *.in , *.co.uk, *.fr , *.eu and so on.

Please suggest 

Regards,

Nadeem A

I have a small problem when sending email signed and encrypted with PGP, all recipients receive a att.00001 with nothing inside  and att00002.bin file that when opened with notepad shows the -----BEGIN PGP MESSAGE-----. Exchange just refuses to send in plain text format. TNEF enable is set to false, aslo I try and do disable, delete and recreate Front end connector , disabled all exchange spam filters. doesn't matter if the receiver uses Exchange or not , the email is delivered in the same way with attachments

When email is sent in clear with no encryption, it behaves just fine 

Using winserver2012 + Exchange 2013 + Blackberry Enterprise 12.

I have no more ideas.