You are correct. I just found it. Having GFI Security/Essentials installed and running and having the sender domain White Listed - I figured that "only if the email got past the GFI event sinks would I see the email in the Exchange tracking logs. And since I did see the email in the tracking logs and not in a GFI Quarantine I acquitted GFI as being an accomplice to the problem.
Summary: GFI MailSecurity had a Rule to delete any email which contained the word Pfizer in Subject or Body. (I forgot about that rule since it was set so long ago). Thank again. Joseph Danielsen From: Kennedy, Jim [mailto:[email protected]] Sent: Monday, November 21, 2011 4:23 PM To: MS-Exchange Admin Issues Subject: RE: Blocked email issue Exch 2003 This is usually due to a third party virus/spam filter. Look there, in those logs and whatever directory it uses to hold quarantined emails. From: ExchList [mailto:[email protected]] Sent: Monday, November 21, 2011 4:16 PM To: MS-Exchange Admin Issues Subject: Blocked email issue Exch 2003 Hope someone can help - I'm lost on this one. Exchange 2003 (patched) My client has been exchanging emails with his client within issue. But this one email (with attachments) gets as far as SMTP: Advanced Queue Failed to Deliver Message. Then I had him forward it to my personal email - no problem. Then I forwarded it to my client - Blocked again. I deleted the attachments > forwarded to my client and blocked again. I then forwarded the message to my client (with attachments) but WITHOUT the body content and it was received successfully. What could be in the Body of the email that could cause this? Is there a place that I can look to find out exactly WHY exchange rejected/deleted this email. FYI: IMF is turned OFF. Thanks in advance! Joe Danielsen --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe exchangelist
