Multiple returned/undelivered messages

[jillrae]

We have been having a high "undeliverable" rate of email messages. About 90% of our email correspondenace is with the Military and we get about a 5% undeliverable response. The biggest problem is when we reply to a message received from a military email address. I stripped off the "This message scanned by BitDefener" (Our virus/spam program) and changed the dispalyed name to Full First Name Full Last Name. These steps helped in some cases, but still our messages are viewed as SPAM or viruses by military addresses. What else can I do to increase our acceptance rate?

Thanks

[ScalixSupport]

Hi jillrae,

I think the first thing you need to determine is why are your messages being rejected. Are you certain it's because of the their anti-spam software?

Thanks,
Rachel

[jillrae]

Rachel,

At first we were getting several messages returned because our anti-virus/SPAM-ware, BitDefender, tacked on a little attachment that read "This messages scanned for viruses by BitDefender". I turned this off and our acceptance rate increased. I guess the receipant's firewall was seeing the little attachment as a virus file. Another problem we figured out was our alias names had to be full first name and full last name and not just the first name. Emails with just a first name alias were viewed as SPAM. We then started haveing problems with emails that were received from a military address (this worked OK), but if we reply to them, our messages will be rejected. The full header returned reason is the message is infected. We ran anti-virus, adware and spyware programs on our sending PC and it was clean, in fact we even wiped the hard drive and re-installed from OS up. Still get rejected if the email is a reply email. The thing that is really confusing, is it does not happen on all repled messages, but is consistent in that it ALWAYS happens when we reply to the same military address. If we type a new message and send it to the same address it is received OK. The only thing I haven't tried is changing the alias to Fullfirstname.Full last name. We were getting some return emails from one address, but the header info showed the recipant's receive box full.

Could the format of replied to messages be different than that of "freshly" typed messages? Does Scalix tag any unseen attachments to replied to email?

Also, we experienced the same problem outlined in another user form message where if the reciepant's address were seperated by a comma, the message would "disappear".

This is a big problem with us as we are a defense contractor and the military represents a significant part of our business. I'm open to suggestions.

Thanks

jillrae

[jillrae]

Here are some headers and received errors. The case seems to be the following:
1. We type a message and email it. No problems.
2. We receive an reply from the original receipant which includes our original message plus their reply.
3. We then do a reply. this message now contains our original messages, the rply from the receipant and we have now replied with another message. This email gets rejected.

WHY??????

ERROR RECEIVED:
----- Original Message -----
From: Postmaster@linux.garrettcontainer.com
Sent: Fri Jan 27 18:48:01 EST 2006
To: Ken Ward
Subject: **Message blocked by the mail filter**


Your message to: ray.bruhn@thalescomminc.com
was blocked by our Firewall-B. The email you sent with the following subject has NOT BEEN DELIVERED:

Subject: 210-859-4175

FULL HEADER INFO:

Return-Path: <Postmaster@linux.garrettcontainer.com>
Received: from mail1.thalescomminc.com (mail.thalescomminc.com 12.38.19.198)
by linux.garrettcontainer.com (Scalix SMTP Relay 9.4.2.4)
via ESMTP; Mon, 30 Jan 2006 07:05:10 -0500 (EST)
Date: Mon, 30 Jan 2006 07:16:12 -0500
From: Postmaster@linux.garrettcontainer.com
Sender: Postmaster@linux.garrettcontainer.com
To: "Ken Ward" <ken@garrettcontainer.com>
Message-ID: <7219986.1138622707581.JavaMail.root@linux>
Subject: **Message blocked by the mail filter**
MIME-Version: 1.0
Content-Type: multipart/report;
report-type="delivery-status";
charset="utf-8";
boundary="----------=_1138623372-28380-93"



ERROR RECEIVED #2:
----- Original Message -----
From: Mail Delivery Subsystem
Sent: Thu Feb 2 06:57:29 EST 2006
To: Ken Ward
Subject: Returned mail: see transcript for details
from root@localhost

----- The following addresses had permanent fatal errors -----
<Raviachar88@aol.com>
(reason: 502 5.0.0 Mail infected )
(expanded from: <Raviachar88@aol.com>)

----- Transcript of session follows -----
... while talking to [127.0.0.1]:
>>> DATA
<<< 502 5.0.0 Mail infected
554 5.5.0 Remote protocol error

FULL HEADER INFO #2:
Return-Path: <<>>
Received: from linux.garrettcontainer.com (localhost [127.0.0.1])
by linux.garrettcontainer.com (8.12.10/8.12.10/SuSE Linux 0.7) with ESMTP id k12BvSC6027118
for <ken@garrettcontainer.com>; Thu, 2 Feb 2006 06:57:29 -0500
Received: from localhost (localhost)
by linux.garrettcontainer.com (8.12.10/8.12.10/Submit) id k12BvSrC027113;
Thu, 2 Feb 2006 06:57:29 -0500
Date: Thu, 2 Feb 2006 06:57:29 -0500
From: Mail Delivery Subsystem <MAILER-DAEMON@linux.garrettcontainer.com>
Sender: Mail Delivery Subsystem <MAILER-DAEMON@linux.garrettcontainer.com>
To: "Ken Ward" <ken@garrettcontainer.com>
Message-ID: <200602021157.k12BvSrC027113@linux.garrettcontainer.com>
Subject: Returned mail: see transcript for details
Auto-Submitted: auto-generated (failure)
X-BitDefender-Spam: No (30)
MIME-Version: 1.0
Content-Type: multipart/report;
report-type="delivery-status";
boundary="k12BvSrC027113.1138881449/linux.garrettcontainer.com"

(garrettcontainer.com is my domain)


HELP, HELP, HELP!!!

jillrae

[ScalixSupport]

Hi,

the key information here is that the _remote_ site rejects your message and there is very little that you can do about it. Ask the postmaster of the remote site what their criteria for message rejection are. Error message #1 is from a remote site, error message #2 is from your own server. That you probably can fix. It says

.. while talking to [127.0.0.1]:
>>> DATA
<<< 502 5.0.0 Mail infected
554 5.5.0 Remote protocol error

127.0.0.1 is localhost, so that is on your own system. Try disabling whatever Spam-Appliance you have or maybe you can whitelist it in your config.

Thanks,

Sascha.