Menu
Reply
  • 1
  • 0
  • 0
Altrigen
Joining in
65 Views
Message 1 of 2
Flag for a moderator

Spam Content Found

Good Afternoon,

A client we do IT support for is having trouble with sending e-mails to Virgin Media/NTL World addresses. We're able to get e-mails through if they remove all links from their e-mail signatures (all links have been checked for malicious/blacklisted content). Unfortunately, once the e-mail gets through the person using the Virgin Media/NTL World address in unable to reply due to the same error 'Spam Content Found.'

Any possibility that they can be whitelisted through your systems?

Thanks in Advance,
Josh Grimshaw
Altrigen Solutions

Examples
NTLWorld used sending a reply to our client: Screenshot

Our client sending to the NTL World account (I have removed addresses for privacy reasons):

From: Microsoft Outlook
Sent: 17 October 2016 10:20
To: [Removed for Privacy]
Subject: Undeliverable: Interview

mx6.tb.ukmail.iss.as9143.net rejected your message to the following email addresses:

[Removed for Privacy]@ntlworld.com ([Removed for Privacy]@ntlworld.com)
There's a problem with the recipient's mailbox. Please try resending the message. If the problem continues, please contact your email admin.

mx6.tb.ukmail.iss.as9143.net gave this error:
wZKH1t01A2UsydU01ZKK2d Spam content found

Diagnostic information for administrators:

Generating server: VI1PR0502MB2877.eurprd05.prod.outlook.com

[Removed for Privacy]@ntlworld.com
mx6.tb.ukmail.iss.as9143.net
Remote Server returned '554 5.2.0 wZKH1t01A2UsydU01ZKK2d Spam content found'

Original message headers:

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=[Removed for Privacy].co.uk; s=selector1; h=From: Date: Subject:Message-ID:Content-Type:MIME-Version; bh=rocBMa4y/zAulTyHklndO7fRjdS6W2puvoC+EgRCs8Y=; b=pSZgLN7aEWPx4zTZ+rQQ+bekcOeD3Ml18qvpAX9J/Ygn7ZYP7G0B9LdFVkQEqHXCfM4ix8fG4pIBC2Yg8ccsqPtP/vsswduYDOn9E93Oa2jVCcAwjlBIv0wWPH28KFWPCMa5wtZgdFHn9iHDX++lxPNV/+foJ3hFizHeFwROnkQ=
Received: from VI1PR0502MB2878.eurprd05.prod.outlook.com (10.175.24.136) by VI1PR0502MB2877.eurprd05.prod.outlook.com (10.175.24.135) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.669.12; Mon, 17 Oct 2016 09:19:17 +0000
Received: from VI1PR0502MB2878.eurprd05.prod.outlook.com ([10.175.24.136]) by VI1PR0502MB2878.eurprd05.prod.outlook.com ([10.175.24.136]) with mapi id 15.01.0669.018; Mon, 17 Oct 2016 09:19:16 +0000
From: [Removed for Privacy] <[Removed for Privacy].co.uk>
To: "[Removed for Privacy]@ntlworld.com" <[Removed for Privacy]@ntlworld.com>
Subject: Interview
Thread-Topic: Interview
Thread-Index: AdIoUwyXArn3mqNOT1O51pdJZOqiEAAADrLgAABo22AAAJJq4AAACqZg
Importance: high
X-Priority: 1
Date: Mon, 17 Oct 2016 09:19:16 +0000
Message-ID: <VI1PR0502MB287828C0F786B6546EA390F385D00@VI1PR0502MB2878.eurprd05.prod.outlook.com>Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=[Removed for Privacy].co.uk;
x-originating-ip: [Removed for Privacy]
x-ms-office365-filtering-correlation-id: 20f15ba9-ce83-4667-ee3d-08d3f66eab47
x-microsoft-exchange-diagnostics: 1;VI1PR0502MB2877;7:y0S8n+UhXCG+P1kUAs+Jz43vOZKPvuYcq9XmwHIdw11T+UXbOOaTsWmUeIwd+HTLaAPnNJ/WbkrMnlmE1CkKd+DBQHolQkTxENSr1qY4lrYHnBbInfwA4NYquTrDA778OTTwwr1wH2DxNx3JVrTUhRKuVf1I2QQaq21ini3nxYcQ15+sQBUhA6awEEJlPrwoZeZhkOKbOhlGOrXEkmZaKPVC8rLvBi8psttimFRYKmT7TUAdL/xLr2x965tY8E38m2sc+m4zObn/5xpqLqIvr6MT6n8XCO2mld/6zTMsLQTNBEmf400B354gCdmTM+gysu9xhO140Hnrjjt1ibRNPCp8UASGpsLB1qRfRHrkPlI=
x-microsoft-antispam: UriScan: ;BCL:0;PCL:0;RULEID: ;SRVR:VI1PR0502MB2877;
x-microsoft-antispam-prvs: <VI1PR0502MB2877903263A2B7BFB8FE43EF85D00@VI1PR0502MB2877.eurprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan: (244540007438412)(21748063052155);
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID: (6040176)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6043046)(6042046);SRVR:VI1PR0502MB2877;BCL:0;PCL:0;RULEID:;SRVR:VI1PR0502MB2877;
x-forefront-prvs: 0098BA6C6C
x-forefront-antispam-report: SFV:NSPM;SFS: (10019020)(7916002)(199003)(252514010)(189002)(107886002)(19625215002)(19617315012)(8676002)(66066001)(586003)(81156014)(2501003)(74316002)(50986999)(92566002)(9326002)(5002640100001)(189998001)(101416001)(9686002)(221733001)(54356999)(81686999)(76576001)(74482002)(106356001)(2351001)(229853001)(122556002)(81166006)(33656002)(3846002)(790700001)(6116002)(102836003)(97736004)(19300405004)(105586002)(19580395003)(19580405001)(8666005)(3660700001)(68736007)(6916009)(42882006)(86362001)(16236675004)(5660300001)(87936001)(7906003)(8936002)(2900100001)(15975445007)(77096005)(10400500002)(5630700001)(7116003)(5640700001)(7696004)(450100001)(7736002)(3280700002)(1680700002)(110136003)(3480700004)(2906002)(7846002)(7059030);DIR: OUT;SFP:1102;SCL:1;SRVR:VI1PR0502MB2877;H:VI1PR050
2MB2878.eurprd05.prod.outlook.com;FPR:;SPF:None;PTR:InfoNoRecords;A:1;MX:1;LANG:en;
received-spf: None (protection.outlook.com: [Removed for Privacy].co.uk does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative;        boundary="_000_VI1PR0502MB287828C0F786B6546EA390F385D00VI1PR0502MB2878_"
MIME-Version: 1.0
X-OriginatorOrg: [Removed for Privacy].co.uk
X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Oct 2016 09:19:16.8744 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: bd1b7cd5-7775-48af-9b84-5806e19e8e1d
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0502MB2877

Edited to removed automatic emoticons!

0 Kudos
Reply
  • 7.2K
  • 173
  • 420
Forum Team
Forum Team
49 Views
Message 2 of 2
Flag for a moderator

Re: Spam Content Found

Hi Altrigen,

 

Welcome to the forums, I'm sorry to see you have been having trouble with emails bouncing.

 

Please pop across the full header of the failed sent email to me via PM, (some of the details on this thread have been edited for security). The header should be included as an attachment in the failed delivery notification/ bounce back message. 

 

Once we have it then we will be able to investigate further. 

 

All the best

 

Emma


New around here? To find out more about the Community check out our Getting Started guide


0 Kudos
Reply