PROBLEM:
You want to deliver Libra Esva spam messages to end users Outlook Junk Folder.
SOLUTION:
Select as spam action in Libra Esva: Deliver and Header. For example: X-Spam-Status: Yes.
You have now to ensure messages with that header end up in users’ Junk Mail folder.
Exchange Server 2003 did not provide any way, out-of-the-box, to be able to inspect message headers and stamp SCL. The solution here is to teach the end-users how to create an Outlook rule to move such messages to Junk Mail. Not so good.
Exchange Server 2007/2010′s Transport Rules functionality allows you to accomplish this easily. Here’s how:
1. Fire up EMC | Organization Config | Hub Transport | Transport Rules tab
2. Click on New Transport Rule in the Action pane
3. Give the new rule a name, add a comment if you wish
4. In the Conditions page, select the condition when a message header contains specific words
5. In the Step 2 edit box, click on the message header link
6. Type X-Spam-Status | click OK
7. In the edit box, click on the specific words link
8. Type yes | click OK | click Next
9. In the Actions page, select the action set the spam confidence level to value
10. In the rule description, click on the 0 link and add a value that’s above your SCLJunkThreshold | click Next
11. On the Exceptions page, click Next if you do not want any exceptions to this rule
12. Click New | click Finish to close the wizard
Or you can use the following commands:
$condition = Get-TransportRulePredicate HeaderContains
$condition.MessageHeader = “X-Spam-Status”
$condition.words = @(“yes”)
$action = Get-TransportRuleAction SetSCL
$action.SCLValue = 5
new-TransportRule “Stamp SCL” -condition @($condition) -action @($action)
Disabling the Content Filter agent:
Since you have a Libra Esva filtering solution running on your non-Exchange SMTP host(s), you can disable the Content Filter Agent.
Messages exceeding SCLJunkThreshold will still be moved to Junk Mail folder.
Disable-TransportAgent “Content Filter Agent”
Alternatively, you can leave the CFA enabled, but disable the Delete, Reject and Quarantine actions.
Set-ContentFilterConfig -SCLDeleteEnabled $false -SCLRejectEnabled $false -SCLQuarantineEnabled $false
Send a test message with the X-header X-Spam-Status:yes.
The message has the SCL value set by the Transport Rule.
If it is above the SCLJunkThreshold, it should be delivered to the Junk Mail folder.