3
Trusted Sender emails still going to Junk E-mail folder
Question asked by Dave Schatzmann - 3/1/2017 at 9:45 AM
Answered
Hello,
 
I am trying to understand why domains I have on the Trusted Senders list still end up in the Junk E-mail folder.

I have about 8 different senders, ALL of who are using a form of Outlook, that end up there every time they send me an email.  This includes my bank, natural gas company, college student emails sent via their school's exchange, Home Depot, etc.  There is obviously some kind of connection with Outlook...but why is it happening on MY end?  I have no problems sending mail to any of these domains...it only happens on received emails, and as stated, each domain is in Trusted Users, hoping that would have corrected the problem.

Any thoughts on how to stop those from going to the Junk folder?
 
Thanks in advance!
Dave

12 Replies

Reply to Thread
0
Dave Schatzmann Replied
Here are a few headers from said emails:

EMAIL ONE
===================================================================

Return-Path: <xx_xxxxxxxxxxxx@pba.edu>
Received: from NAM01-BN3-obe.outbound.protection.outlook.com (mail-bn3nam01on0135.outbound.protection.outlook.com [104.47.33.135]) by mail3.hostek.com with SMTP
(version=TLS\Tls12
cipher=Aes256 bits=256);
Mon, 27 Feb 2017 22:35:34 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=PBAMAIL.onmicrosoft.com; s=selector1-pba-edu;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=Dsb7uVoCNnpuObHvc7UPKgpICYqAacEcVuXyvwCOYUA=;
b=O3//9RwdddDYhBp1pUc7IxxJ3OUHPfFuQ2Bjcwn2o8434kaaT6EVwG+m7MiTNZZTniMr4LRB3rclqZyw2zN7mkapp4ufWjIS9kVpa/Ge572llt4j2YReaKbW6UWDTn2aV7+fMpMazlmrOKsNVlQG319KybPJYDCoBB/KONtRmkQ=
Received: from MWHPR06MB2623.namprd06.prod.outlook.com (10.168.208.145) by
MWHPR06MB2621.namprd06.prod.outlook.com (10.168.208.143) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.1.919.13; Tue, 28 Feb 2017 04:35:36 +0000
Received: from MWHPR06MB2623.namprd06.prod.outlook.com ([10.168.208.145]) by
MWHPR06MB2623.namprd06.prod.outlook.com ([10.168.208.145]) with mapi id
15.01.0919.022; Tue, 28 Feb 2017 04:35:36 +0000
From: xx_xxxxxxxxxxxx@pba.edu>
To: "dave@schatzmann.com" <dave@schatzmann.com>
Subject: Re: FAFSA 2017-2018
Thread-Topic: FAFSA 2017-2018
Thread-Index: AQHSkTAQWE7kIwxnX0GHU2KN2j9lNqF91dVT
Date: Tue, 28 Feb 2017 04:35:36 +0000
Message-ID: <5C63AFDD-800A-4B24-9FA7-427F5D9AC014@pba.edu>
References: <bb7a7e75b24545aa9753d2f7528fe4db@schatzmann.com>
In-Reply-To: <bb7a7e75b24545aa9753d2f7528fe4db@schatzmann.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is )
smtp.mailfrom=xx_xxxxxxxxxxxx@pba.edu;
x-ms-exchange-messagesentrepresentingtype: 1
x-originating-ip: [66.87.123.105]
x-ms-office365-filtering-correlation-id: 3eacff7b-d227-41f8-24d7-08d45f933d7f
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:MWHPR06MB2621;
x-microsoft-exchange-diagnostics: 1;MWHPR06MB2621;7:mgFHxaBi/JZE0XO8Vuh4w1FOJOh1JBTLFwtI/ZY5QjRNoN3KY+m7gKdmiJDFZltMbU9rSsYC+AFqHaISyo6ozsVsAH/w484SThCUP2lEA68SkFKb/iRdQTQkaohCqnFH1uX99D3N403qgxrC6N+uxISgJWNcdX8EQLrFKyTKsCC1L1jlWkCEzOT79pkS/UF5n5+0v2UYJTg3H5LwUMdfqgBz6uIv+KIiwj0N6NhKcjfbIzzCcy2mzp3X1PxFQtlXN1mzMTpOxDvuJEo0ZThNioC1HRWl82lwKXfaa56m7qmXYOr9EOf/DN1P+vcHAWd2/sJv7ySzt/4a4JqiYR33fQ==
x-microsoft-antispam-prvs: <MWHPR06MB26219B4C8C8084584C704B43E2560@MWHPR06MB2621.namprd06.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(254616516167838)(77016214372589);
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(6040375)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6041248)(20161123558025)(20161123564025)(20161123562025)(20161123555025)(20161123560025)(6072148);SRVR:MWHPR06MB2621;BCL:0;PCL:0;RULEID:;SRVR:MWHPR06MB2621;
x-forefront-prvs: 0232B30BBC
x-forefront-antispam-report: SFV:NSPM;SFS:(10019020)(7916002)(39450400003)(199003)(189002)(377454003)(24454002)(69234005)(2501003)(66066001)(92566002)(189998001)(8676002)(106116001)(3846002)(81166006)(75432002)(88552002)(1730700003)(122556002)(53936002)(105586002)(6116002)(3660700001)(76176999)(6436002)(2900100001)(86362001)(81156014)(6916009)(2950100002)(3280700002)(97736004)(1680700002)(102836003)(50986999)(54356999)(101416001)(606005)(36756003)(8936002)(6306002)(25786008)(6246003)(6506006)(54896002)(6512007)(450100001)(5640700003)(99286003)(83716003)(82746002)(5660300001)(5003630100001)(7736002)(2351001)(229853002)(53546006)(110136004)(106356001)(2906002)(7906003)(53386004)(9886003)(6486002)(236005)(38730400002)(77096006)(68736007)(33656002)(104396002);DIR:OUT;SFP:1102;SCL:1;SRVR:MWHPR06MB2621;H:MWHPR06MB2623.namprd06.prod.outlook.com;FPR:;SPF:None;PTR:InfoNoRecords;A:1;MX:3;LANG:en;
received-spf: None (protection.outlook.com: pba.edu does not designate
permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative;
boundary="_000_5C63AFDD800A4B249FA7427F5D9AC014pbaedu_"
MIME-Version: 1.0
X-OriginatorOrg: pba.edu
X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Feb 2017 04:35:36.1235
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 676be81c-18d9-4598-84ec-d2691a0ead0f
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MWHPR06MB2621
X-SmarterMail-Spam: SpamAssassin 3 [raw: 3], SPF_Neutral, DKIM_Pass
X-SmarterMail-SpamDetail: SPAMD/1.1 0 EX_OK
X-SmarterMail-SpamDetail: Spam: False ; 3.2 / 6.0
X-SmarterMail-SpamDetail: HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SA_SERVER,SPF_HELO_PASS,SPF_NEUTRAL,T_DKIM_INVALID
X-SmarterMail-TotalSpamWeight: 0 (Trusted Sender - Domain)
===================================================================

EMAIL TWO
===================================================================
Return-Path: <prvs=2225e0cea=arthur.veros@hilti.com>
Received: from esa6.hilti.c3s2.iphmx.com (esa6.hilti.c3s2.iphmx.com [68.232.151.138]) by mail3.hostek.com with SMTP
(version=TLS\Tls12
cipher=Aes256 bits=256);
Sat, 25 Feb 2017 10:17:51 -0600
X-IronPort-AV: E=Sophos;i="5.35,203,1484002800";
d="scan'208,217";a="5389080"
Received: from mail-ve1eur01lp0246.outbound.protection.outlook.com (HELO EUR01-VE1-obe.outbound.protection.outlook.com) ([213.199.154.246])
by ob1.hilti.iphmx.com with ESMTP/TLS/AES256-SHA256; 25 Feb 2017 17:14:36 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hilti.onmicrosoft.com;
s=selector1-hilti-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=MUhRnn/lMlbU4M93QatowvYBfWzxVeic2Q8odJsSimE=;
b=QHlZh80Yd2FNLxxFPgEqpS8X/EGVJXW0olvyRsq8V3K6GFxvjlIQaiyfY/Gc2/Uq44F5vxvBkZhJVokvjxc8/CvGVgZqdr7GhB/KXpRg9KYXXIBKbKcsEGDKMh5k2QNrAoNa5pnurCzu16EPfES3wpy9VE16GtQQrmlz/d/2DBc=
Received: from AM5PR0701MB2628.eurprd07.prod.outlook.com (10.173.92.147) by
AM5PR0701MB2627.eurprd07.prod.outlook.com (10.173.92.146) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.1.933.7; Sat, 25 Feb 2017 16:14:31 +0000
Received: from AM5PR0701MB2628.eurprd07.prod.outlook.com ([10.173.92.147]) by
AM5PR0701MB2628.eurprd07.prod.outlook.com ([10.173.92.147]) with mapi id
15.01.0933.016; Sat, 25 Feb 2017 16:14:31 +0000
From: "Veros, Arthur" <Arthur.Veros@hilti.com>
CC: "Veros, Arthur" <Arthur.Veros@hilti.com>
Subject: RE: INQUIRY CONCERNING ELECTIONS
Thread-Topic: INQUIRY CONCERNING ELECTIONS
Thread-Index: AdKPggzSY+OBkRrQRYK7yK2hBmX5qw==
Date: Sat, 25 Feb 2017 16:14:30 +0000
Message-ID: <AM5PR0701MB26287BD255ECA5A4D00737729E550@AM5PR0701MB2628.eurprd07.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is )
smtp.mailfrom=Arthur.Veros@hilti.com;
x-originating-ip: [72.213.140.136]
x-ms-office365-filtering-correlation-id: e8a60c29-0fd6-46c6-d09f-08d45d996160
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001);SRVR:AM5PR0701MB2627;
x-microsoft-exchange-diagnostics: 1;AM5PR0701MB2627;7:gXpmzpirAHUx2kVD7/SXqyo2uORnzhdRqfN+3QZydVsbJcxzLg0SCuADCn2oR4Zwqx3qm0Fpb/RbHyzlqj7ECsPCX9X8EHuvGrcqyc7q7LzhDyoddiPq0ndIIGpq8MEKrcu1kyw7alc4SZwOn7N0DWHEKoK8H1qv0aX9VjeXXre0Zf526L3dg40z+pQvs1sKkrlznVQwArRMVXmBF/EFv7d5j5WAr1Z18AQAhn5+L42kQZA+Cf3puHvpHsOo7ZQy2ja9ei2B6dtMlkJB+Rn5Rub+PdYWs05Pel/LiFN4TG8HInKNfwMyCHqBmLt+8VUO2aAq1o2Mtmi9zFpGrw+Uvw==
x-microsoft-antispam-prvs: <AM5PR0701MB26270D34F6CCF9751F975D759E550@AM5PR0701MB2627.eurprd07.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(219297518888565)(229068734017863)(231520050306958)(79046362386883)(149059832740258)(84792000423722)(228869891846254)(37052965297144)(180321167178072)(102376258605429);
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(6040375)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6041248)(20161123555025)(20161123564025)(20161123558025)(20161123560025)(20161123562025)(6072148);SRVR:AM5PR0701MB2627;BCL:0;PCL:0;RULEID:;SRVR:AM5PR0701MB2627;
x-forefront-prvs: 02296943FF
x-forefront-antispam-report: SFV:NSPM;SFS:(10019020)(7916002)(39450400003)(189002)(199003)(24454002)(37854004)(118595004)(377454003)(9686003)(6306002)(33656002)(54896002)(8666007)(236005)(92566002)(2900100001)(8656002)(6246003)(99286003)(25786008)(54906002)(55016002)(101416001)(53546006)(106356001)(66066001)(38730400002)(77096006)(53936002)(6436002)(39060400002)(606005)(3660700001)(6506006)(229853002)(54356999)(3280700002)(50986999)(105586002)(97736004)(122556002)(3846002)(5660300001)(19609705001)(7696004)(2906002)(7116003)(1680700002)(4326007)(790700001)(6116002)(102836003)(189998001)(8676002)(575784001)(7736002)(86362001)(81166006)(74316002)(2501003)(81156014)(7906003)(68736007)(8936002)(3480700004)(7406005)(7416002)(13820500002)(217873001);DIR:OUT;SFP:1102;SCL:1;SRVR:AM5PR0701MB2627;H:AM5PR0701MB2628.eurprd07.prod.outlook.com;FPR:;SPF:None;PTR:InfoNoRecords;MX:1;A:1;LANG:en;
received-spf: None (protection.outlook.com: hilti.com does not designate
permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: multipart/alternative;
boundary="_000_AM5PR0701MB26287BD255ECA5A4D00737729E550AM5PR0701MB2628_"
MIME-Version: 1.0
X-OriginatorOrg: hilti.com
X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Feb 2017 16:14:30.8524
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f039b656-fc02-4e54-88ba-82626f29b5a1
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0701MB2627
X-SmarterMail-Spam: SpamAssassin 1 [raw: 1], SPF_Pass, DKIM_Pass
X-SmarterMail-SpamDetail: SPAMD/1.1 0 EX_OK
X-SmarterMail-SpamDetail: Spam: False ; 1.6 / 6.0
X-SmarterMail-SpamDetail: HTML_MESSAGE,RCVD_IN_DNSWL_BLOCKED,SA_SERVER,SPF_PASS,SUBJ_ALL_CAPS,T_DKIM_INVALID
X-SmarterMail-TotalSpamWeight: 0 (Trusted Sender - User)
===================================================================

EMAIL THREE
===================================================================
Return-Path: <ebill@oklahomanaturalgas.com>
Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0069.outbound.protection.outlook.com [104.47.34.69]) by mail3.hostek.com with SMTP
(version=TLS\Tls12
cipher=Aes256 bits=256);
Tue, 17 Jan 2017 23:49:51 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=onegas.onmicrosoft.com; s=selector1-oklahomanaturalgas-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=4LYUsLgnbxw06xWQobmzbIVTW+2R1p/j02lYaXOCTv4=;
b=LSRvpdIACbxWFHmS15IfO5KwbVAjz/8y5jOC7K3Y9JloAcFjngIf9mFrwv7R/byVSPi2QiZJMBJuNV85mMcAk9GSvZ7sWsag9s2UuUhYkGlnIFwFQKvzrRIEBQMJkMVsW8cL2eCXDkNqi8O84P9jPkDVELRE+Lzh5Kk9xdG4VKk=
Received: from SN1PR0701CA0015.namprd07.prod.outlook.com (10.162.96.25) by
BLUPR0701MB1619.namprd07.prod.outlook.com (10.163.84.156) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.1.845.12; Wed, 18 Jan 2017 01:16:29 +0000
Received: from BN1AFFO11FD043.protection.gbl (2a01:111:f400:7c10::186) by
SN1PR0701CA0015.outlook.office365.com (2a01:111:e400:5173::25) with Microsoft
SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.860.13 via
Frontend Transport; Wed, 18 Jan 2017 01:16:29 +0000
Authentication-Results: spf=pass (sender IP is 72.194.134.36)
smtp.mailfrom=oklahomanaturalgas.com; schatzmann.com; dkim=none (message not
signed) header.d=none;schatzmann.com; dmarc=bestguesspass action=none
header.from=oklahomanaturalgas.com;
Received-SPF: Pass (protection.outlook.com: domain of oklahomanaturalgas.com
designates 72.194.134.36 as permitted sender)
receiver=protection.outlook.com; client-ip=72.194.134.36;
helo=relay1.onegas.com;
Received: from relay1.onegas.com (72.194.134.36) by
BN1AFFO11FD043.mail.protection.outlook.com (10.58.52.190) with Microsoft SMTP
Server (version=TLS1_0, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA_P384) id
15.1.803.8 via Frontend Transport; Wed, 18 Jan 2017 01:16:28 +0000
Received: from ogswebmt01ptul ([10.24.4.11]) by relay1.onegas.com with Microsoft SMTPSVC(7.5.7601.17514);
Tue, 17 Jan 2017 19:16:28 -0600
X-EmailId: 7380407
X-Email: dave@schatzmann.com
X-BillingAccountNumber: 2126601831771047
X-LDC: ONG
MIME-Version: 1.0
From: Oklahoma Natural Gas <ebill@oklahomanaturalgas.com>
To: <dave@schatzmann.com>
Reply-To: Oklahoma Natural Gas <ebill@oklahomanaturalgas.com>
Date: Tue, 17 Jan 2017 19:16:28 -0600
Subject: Paperless Statement
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Return-Path: ebill@oklahomanaturalgas.com
Message-ID: <OGSMAILR01PTUL3DjFb00031cc9@relay1.onegas.com>
X-OriginalArrivalTime: 18 Jan 2017 01:16:28.0433 (UTC) FILETIME=[7EA1D010:01D27128]
X-EOPAttributedMessage: 0
X-Forefront-Antispam-Report: CIP:72.194.134.36;IPV:NLI;CTRY:US;EFV:NLI;SFV:NSPM;SFS:(10009020)(7916002)(39410400002)(39450400003)(39830400002)(2980300002)(438002)(189002)(199003)(8676002)(7906003)(236005)(8936002)(8746002)(81156014)(23846002)(69596002)(23726003)(3450700001)(9686003)(110136003)(5660300001)(6916009)(81166006)(7116003)(97756001)(3480700004)(54356999)(10000500002)(2351001)(50986999)(106466001)(450100001)(1600100001)(626004)(43066003)(107886002)(38730400001)(18926405002)(6306002)(50466002)(104016004)(86362001)(221733001)(861006)(356003)(189998001)(77096006)(10750500005)(2906002)(606005)(733005)(575854001)(7099028)(110146012)(110126006);DIR:OUT;SFP:1101;SCL:1;SRVR:BLUPR0701MB1619;H:relay1.onegas.com;FPR:;SPF:Pass;PTR:cox-72-194-134-36-static.coxinet.net;MX:1;A:1;LANG:en;
X-Microsoft-Exchange-Diagnostics: 1;BN1AFFO11FD043;1:p0wdRVgKxMn+5OLj+Scey79FVn+1oVRwvJgkldmA+cPCb60tFA1fC/SXDIDlMW8CNQO4Ud8suCks1aa5TTCoDxRRHzIVryT2Em5gXHx7lWvCIbj/7L7Cc59pmBddQBBvb3Yw9nqBE3G85N2QVgy6imiKa/z5qFvymPMxeEI09kIMmgz0hpM9ebd9BjXn1eB/+KofVskzofK7p7iFCyy6fVWHpDEqOh/qO7Sd4Jh5y6DI2LoO3di+IMvvPaTtUzBj7rRTJcGjpfVJNhrGU7Ktkl/gplzVeF/yspMFR9nIL9c9877eRPJSkB5KNWrh+RiujqWK5vhewXku2M0awRtqLkYZsr6E8pG5jVTQwog50Ud1y9+8xVwYwnMIozVIAHUgUCBFlerqKeh3DTbXmmXrJdh8FHf63uqOLC698686UHvw4tX9GbXMumGTg4rjTPumpPkt7BINufpHhU29Y5kMPdsjGTiT/rrlIbD2TVzSfwRp5A/KpsoCo3zkUBYFnUvk
X-MS-Office365-Filtering-Correlation-Id: f4eb4741-b21c-4939-d8c5-08d43f3fa16d
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001)(8251501002);SRVR:BLUPR0701MB1619;
X-Microsoft-Exchange-Diagnostics: 1;BLUPR0701MB1619;3:bR/CkPK3YFStgZexJ07TOvZVvOQWhvTbqifOi9zE32wXzPgvlN1vBpYZ4jSbqaZ8McPaLCMlmbUKfwIR2uz+tLzgAuwm0NkkdUc5VVYXBOSINzdeC7PCpSlcBRvRLt5u+K//3kmuVkyF8WHMgJc9YGIAAHwu0Voc1ZLchEZmF6pAYOrobg9FSScSrslAH5jzLbQX64ZoAq+ZoA4snq1qbdGWc+5Msj1BXlRgzTEg7vo5FdFZtMb2hDrwTGHe6C9o4wsvsS9o1lizwZlwBEOXL3wuvLAsigTqNWmuDV5/a/5yNzLfdvijUu8twl3P7XjSRsq8ZhyV/vaAhZAgpOKkIp0zLOdoDayJK+lSHSWjL2AIiii+X3tR5/5DLxJW6rCNKbM+mIk3Ye+DzfJ63CfspA==;25:ab1P1Od/xEthQpZdkRczEzdIi/04oizY+LYopwNT+2Hhe0JgCwkYsZwERQrMvXhJLrM41j3t8qaCOWfqthwRpTK6NxKNARv+C3MjbdlXV6oIcEw2hZiKDUclt0ksQ+mFvpnyGODTVIVEirqK69dl+OcWy6lAAImlJdVI4YOmJvSazJge4+I3qCglyJUOesPn1losPrj7pUSjo6RLhN+3bQJXypIvk4lzod5652jLiTOgfRWQe1f1C8MeTZJd7TeHhfhyu1UUO9w+/EvuxC7EgGYyHeCsdJC6y/zxaQzFwGbvFJKHtHsqfFuHwzWsq0LeWePNCdfh6v+u3cQRCDPnV19ZtaOi94Sn0lTLZ/rR3V2yBISL9bT0HY+NsMuFiG9r9cQNUBnoLPumDCIZvB4yiiJaAuWPvjnOQGdrnDRxQLj0sy4Iv97PrQDa3KZWZ3Rc3vefnBZgMbRIJIEz0Ju6SA==
X-Microsoft-Exchange-Diagnostics: 1;BLUPR0701MB1619;31:lP9R6MoI08f/Sd602vHV4OPEtN2evg/N/aXx/4twDfoW8NU+NW+Sim+4Csx5lu7UvAcNLB3FjE8VPEN8a0OY5z9214UHeeKwv0d+MRTxi79VzDRW8BURMF+zKjhrLOnza8b00PlnF8C1fbSZIYU+hCqB2WJ+V56QGW6P7v2hUsk8CsGZdX2KZpoaovZKFgvPCeR9J7eUr/mudmXbv3tDD7MDobPMa+PMV40h6+0yTcLAkBbzRknUhgwrH7LnxMv59kdxciXgXjqj86RvZ0sc8g==;20:sBggH5zvc9Jbtnz/apWbySHjjTclxIrmcH57dOv4HIJGT6bLieaeYmRMpvEL4XfVo3IGcW6Acrkl/vv4AvNNsvlwJjTbl3r81FTc+pMVcHOdj3q5vGbdFsjA+YxBCtjBT6vmE2hX5kgGHUT8bmmKNaVZTps2Y07hr3HnDLRBSiQsSupgZdmONz1ZJq4tjS/Ko1kjz9cDn2RLHymw4crl0/0Klg1kF8wnZseKTbG/iAnXXi7Y0VIg+AlGsSaJJOqDNr6ZFed1LW1MCHK9/mvF6Dd8sumz2eSeT90PTwBRzfZlJteFmspA5a0Q7sDeY5XhN9U4uEzgrnho6rFd3gqzKJ0Tax2WMVKc1vw0nun9m1giSwxggJBB5bG1By7bm1P3div3V6nf6F6g2pP0jPERbHk/wT6s4sp5tD0+Fqcw4CkYDcOl4OTbQxIEbUoQT/zgnYPFQFhCrsf9NHGzTkbRnJ7LAv4VfZLB/mXLqOZgKa7JqFJWe17/GuXitHWwGMb2
X-Microsoft-Antispam-PRVS: <BLUPR0701MB1619692CEE4494354E8B54A5DD7F0@BLUPR0701MB1619.namprd07.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:(118364567717986)(263907128678384);
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(6040375)(601004)(2401047)(13015025)(13023025)(13024025)(13017025)(13018025)(5005006)(8121501046)(3002001)(10201501046)(6041248)(20161123555025)(20161123560025)(20161123562025)(20161123564025)(6072148);SRVR:BLUPR0701MB1619;BCL:0;PCL:0;RULEID:;SRVR:BLUPR0701MB1619;
X-Microsoft-Exchange-Diagnostics: 1;BLUPR0701MB1619;4:Cj7zTMo/ABfgu/58Zbwpvp65oKJPsR3CjVvxiuV8QoTrv0ZxuSScBWJawwyy9v6002PlyJo+UP/MX89PGEqYz9P3MhoptNOJK2D+z+mgL/VWd1N64f+4HIjsOvxYkJqq3+o1yNviyJVDJcOfESXRknR+h+StMVBnkUVYRjL08or2bxfhCmO2V0nh4QrAmKe4fynmHsOBxF8NcxUkrpHkHINfLVmGNuTz7wXizoyErkL6/gs2qFE7lFx2mIpPxk0jpGSbtXM8h3sRFR1IusroKVadNHwBOdxlJRTJoiIT99SikZRmYanoW7q6hneAf+mDTva/fbdF5Lwx8wFk8v1fFLtkz9J7cJ3Gyl5iojNmWoejYkiOECX3vnZwdzuIPoVPjW0jz4LwN0+3+n/Q2oTmizYHabTf7KqsX4cQhjgRwOP50CqoW0eiTDY0aA9pdA1t2d5A58hHsP5S+t5EJl+7w4gST8LDecSW01m35K/66smDpifF7MfG3dwE2pY9ThB2A7kFCTdav/LOqKiZXKFxpLOxGKKqooVSFmizyAHVvpQSZaYw4BSP26Tp6D5dR16INdl0Hvh+7oH9zMmq88TGMK3Eotdn1yL4dgNdho2w9hh9HxckE3mRHfKXvgQTF3rx4FhZRUmtrkAkN3gXSscfLvBf5Yj+pVpIpOKiF5WPaCt6A0LEOsTyPzndbjM10HErirswCKZN75p3KYOgQGWxwx2h9/BnTNRXcep7NU0rLKRpZ6ZgpFMQNiFUuvsp05J4
X-Forefront-PRVS: 01917B1794
X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1;BLUPR0701MB1619;23:EV8vAIzUYvX3PFruYvv31XtOqCLJ1OK4UyGGfGu?=
=?us-ascii?Q?GqTlu7i2o6N+eloJGVUQylik+DO+fyr7axlIsEEdMnygi+ResUwk1rIDPKd+?=
=?us-ascii?Q?jHUZClZzi96/s/d/MLUlzYfQYn2YpnAU4sOM1p9Ot43VGf4TrooH4KK/zIJg?=
=?us-ascii?Q?M1T/LNp7ErafFNXfrvghmShsg9czvB+IuS7GZuU3MAkjm7oyMHO8h4tvkAIX?=
=?us-ascii?Q?ayE8V7867n1M3EoPnRGwnmC/HAmNJbl6Za1P+uTLAd5YWjse5hhEiqx53TYE?=
=?us-ascii?Q?Gd4P3pkdftMUEOeuuQ7Vvn+WzffJt/C8fg8Y/LpByrgq97QnwHN1IdXHCoyH?=
=?us-ascii?Q?xbNkgLx9NuAjQLV1zhBCEOu+r8H+TzwEM2IwB50IjBSnzJLLA8dmIRq2rDK7?=
=?us-ascii?Q?TnXlKolveNvgN6oK8kfZVvHCjXPvKmQ3EHlIVzp3W66u0LbfuDlRtfZyHHKf?=
=?us-ascii?Q?MSuvJ06+SH28vcQm595acW5HfPhQPOcC8bJlFbefd3/+aTI9DyiRLjc9gxVa?=
=?us-ascii?Q?j4LrnIVDB+F3hT5k+cipCKUA3mHO0mt+ZvczAuNC84tGRyudHaFe/0EmKXKa?=
=?us-ascii?Q?bWSz+tXUG3cT2sudZapt5MaGz+iuDALyDRMMwuCkKRXii1eG4MBsiDlNN+De?=
=?us-ascii?Q?dWrTbx8mA9cyg0wyMpta7/t2K2Pf/aabNRY79qXMDUL39m4E6taal2g5InIo?=
=?us-ascii?Q?z4b7+b8QgROn/g7Jl41Yn6Qn+suWdyChWwSu+MV1wHDJZ/mDuGKNsrqZpE1J?=
=?us-ascii?Q?UKoOchF+DMqUVDazMt5ZM1+8hDq/UsiO5Bj+A/k7W1NphelTu426nN72Kq+V?=
=?us-ascii?Q?v+uOCCUjzmYuRDfRvfKv74PA8HtQ2yGO/HdVCFTOAxVHOVCNksINnm7hw+Ke?=
=?us-ascii?Q?eZOYUSevkx/QE3D5qk/aT9DANiQHjje0Jq6XJ0PRQA7hI6/kI7kOii0+uDUX?=
=?us-ascii?Q?7Ld321tCPcLfPU+nlypPr/SWBTTX37S1evzQtMeishDuDGj+k5+N62Y9t/HH?=
=?us-ascii?Q?gFdqIMeRGhK/pL7RGQuaVPqRCc/Hq2RCqdRvMcvj7m//N5suUH4nxW41nTgz?=
=?us-ascii?Q?oYjBnwopR/zeKvl/Lq6Uerc+WWoBoFSvYzTDKbiZ3WutwBQx0PbFXzubMjDL?=
=?us-ascii?Q?KPEePhXBGtTe6dwxs/KRB5oc7FWJI4l9feN9AiVrz8eBPv6U9gEID5GvLFUK?=
=?us-ascii?Q?UOdFJNL8WkBt7VKX+P5maCe6M6uXOKoQum4mvqoBaQrIqzEHqZ0X1wWyif56?=
=?us-ascii?Q?VL+av+Ii9Pi5Y4HV+ebdNDXpwcHA6AYUCOg7V6nMYLmMEsIchl/uGCkqpniR?=
=?us-ascii?Q?u3w=3D=3D?=
X-Microsoft-Exchange-Diagnostics: 1;BLUPR0701MB1619;6:yf4nZPOVjt5FmbzLvGRcWrBswxb441kXbo0KTnab/CMD+wM1Vz9v7w+Cs8SzHHwE+PdYidGK1L++fyBwY0ODjyl9mictgN3tkipehE+hh8p54MU5I55HjzPX43ld1oYok8TUYCu68JzbeEZ+MUmpq4WXR7EhdgnyApSzLc3bf3OGA9r2M2jMohehRhqkfSJWXXVk/0Hp+gVXSHUXty2kqYy7dWaVSBfpWrB28GTWuctqLHpM+c1di8JRX4pWgNJFDv6Ykgu2E4u1Yu0z0v+mdbhI8LlYEdE2cOsiKTLcOuGzihqdnho4DuRXtlamgtguyJoDsJd7wIHtQODT+gaCprVIN74XlDWyCt7WSmQO2JdgDopINWybr5b22dgo474tZ/lKG4j/hZ+1rM9hNvtkZeRiHXnf/Dq5aBK1jk6jBY8=;5:ixZCXL/NKCuCLh9jU5y3x9KpDA/M1XfyN7OLNY92U1we6Exo1w0gRZ0f4pQwGzI5CAVlUbypzqtfmmqmGdTMzssx6rykTXl9KOn7mECIwdHF5KNcqCx4JKB32vzXqD+oYkJ3ywp99FoGQJashBkqtzwu7OcS5xjyshKUa70rQkI=;24:4iYvyvLNJyCOj2qrhJmZ8pqC3dtON5WxCYwH/rcGUoT/e9n63hOIJ2+zpL0tcWFcipBlWrpN/qonCZFNQPgnCQ1eOUb1mfRH7cA+hcfy4CQ=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1;BLUPR0701MB1619;7:YBq6z+gECNcUOyEZsxGbkZXtNg4KgNFy/5tjeI7oktEcEIsagRugivoojSxdieYtMcZr3XV32PCcxpTtJcoBCpLU1jWRkDirniFltMJiZpw0sel5Ybhvjn1y1zRP32NWQRLUVkt02VbKCy39WqEz7zLeAAO7DGheLDNpV3Vlouc9eQQfP5PkEfR2sxRVTcV+HpbkuMNuK08/MQWaKaOyxW/rBYs+QOiL2lfDDRvqFJdRx8Elxx+f/RKdf4xg5+Fp8mlVbDCMwLR44hHMfwmp4dr19xsynlAwc1r1MBefIoBQ9VtAqHAzqga3RgsrzPukzwstfAZzm5caEerWw+2dh10kfv7qp+QmXeXGGQhlU2YOErk7/FgZAwySMLqFpS0eQU+1AgKYXjSrXDuEuvoAwQIV80YSTjawwWI349CX/1OuMB25oMndv0z+LrR219hGaB0yTyECREf16enqs7U94g==
X-OriginatorOrg: oklahomanaturalgas.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Jan 2017 01:16:28.7406
(UTC)
X-MS-Exchange-CrossTenant-Id: 1cac1176-089b-4bcd-aa37-24195cff538e
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=1cac1176-089b-4bcd-aa37-24195cff538e;Ip=[72.194.134.36];Helo=[relay1.onegas.com]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLUPR0701MB1619
X-SmarterMail-Spam: SpamAssassin 6 [raw: 6], SPF_Pass, DKIM_Pass
X-SmarterMail-SpamDetail: SPAMD/1.1 0 EX_OK
X-SmarterMail-SpamDetail: Spam: True ; 6.8 / 6.0
X-SmarterMail-SpamDetail: DKIM_SIGNED,DKIM_VALID,HEADER_SPAM,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,LOTS_OF_MONEY,MIME_HTML_ONLY,RCVD_IN_DNSWL_NONE,SA_SERVER
X-SmarterMail-TotalSpamWeight: -4
===================================================================
0
User Replied
Hi Dave. In your first 2 examples, I can see that the Trusted Sender's List was triggered...
 
X-SmarterMail-TotalSpamWeight: 0 (Trusted Sender - Domain)
X-SmarterMail-TotalSpamWeight: 0 (Trusted Sender - User)
 
For the above, check your Delivery Log to see what it says. It will normally tell you why something was sent to junk.
 
As for the 3rd example, it looks like it did not trigger the Trusted Sender's List...
 
X-SmarterMail-TotalSpamWeight: -4
 
However, a score of -4 shouldn't land in the Junk E-Mail folder regardless. I would check the Delivery Log for that one too just to see why it was sent to Junk. Also, be sure that you added the correct address/domain to the Trusted Sender's List for this one.
 
I hope this helps. Thanks!
 
0
Dave Schatzmann Replied
Thanks Linda. I have found out that a rule in my own domain level content filtering has triggered these.

I am very confused though. I would have thought that if a domain / email address is marked as a "trusted sender"...that SmarterMail would completely disregard ANY server or domain side tests?

Thanks
Dave
0
User Replied
You're welcome Dave. I would think that too, but I'm not sure of the order of things in the newer SM versions. This very well could be a bug. I'm hoping one of the SmarterTools techs will chime in here and verify for us.
0
Employee Replied
Employee Post Marked As Answer
Hi Dave.  A Trusted Sender means that any spam checks are going to be ignored.  However, any Content Filtering will still be checked and applied afterwards.  What you're describing sounds working as designed.
0
Kevin McNally Replied
Hi Rod,

We have an email address that delivers our emails which was added to the Trusted Senders list before we upgraded to version 16 the other day. Since the upgrade the Trusted Sender designation is being ignored and the spam weights are being added. The email address is failing Reverse DNS Lookup and an SPF soft fail.

Kevin
0
Nicolas Fertig Replied
We have the same problem on our SmarterMail 16. A customer is receiving mails from a contact that have a failing SPF record (because of a typo in their SPF line) and it goes to Junk Mail.

Our customer added the source domain and source e-mail address to their trusted sender list, but spam weight still increase and mails from this source are still delivered in Junk Mail ...
0
Nicolas Fertig Replied
We have the same problem on our SmarterMail 16. A customer is receiving mails from a contact that have a failing SPF record (because of a typo in their SPF line) and it goes to Junk Mail.

Our customer added the source domain and source e-mail address to their trusted sender list, but spam weight still increase and mails from this source are still delivered in Junk Mail ... 
0
turtle Replied
This is a daily occurrence, marking incoming as "trusted" and Not Spam" for the same accounts over and over.
 
the incoming are my customers sending from other of my servers.
 
Is there anything to correct this?  Setting an IP address to always pass without checks?
0
Matt Petty Replied
Employee Post
If we didn't validate SPF when performing the check to remove spam weight from a message, than a spammer could spoof a known trusted contact and send your users all the spam and malicious content they'd like without getting blocked.
It sucks but its necessary to prevent abuse.
Matt Petty Software Developer SmarterTools Inc. (877) 357-6278 www.smartertools.com
0
kevind Replied
Matt, exactly right!

Nicolas, here's more info:
https://portal.smartertools.com/community/a86864/why-not-validate-trusted-senders.aspx

0
turtle Replied
It appears that adding the full domain instead of the email address may have been the workaround. This is simple for me to do but on the outside of "too techie" for my customers to handle.

Since adding the full domain name of the customers whose email addresses were being tagged as spam, none of them have been sent to junkmail. It's to early to say this resolves the "problem/bug" but so far it has given me more time as I need to spend less time looking for erroneously tagged emails and set them to "not spam" over and over again

It would be far simpler to be able to whit-list an entire IP address so that all of my mail servers can talk to my smartermail server without being tagged as spam.

Reply to Thread