question

JakubDobes-6077 avatar image
0 Votes"
JakubDobes-6077 asked YukiSun-MSFT commented

Sender Filter not working

Hello,
the BlockedSenders rule is not applied to incoming mails. When I send a mail from the externalmail@email.cz (named in the BlockedSenders list) the mail is not blocked but received in the recipient mailbox.
The Sender Filter is enabled and the action is Reject. I don't know what is missing.
Could you please check it and help me?

There is an output from my lab:
[PS] C:\Windows\system32>get-SenderFilterConfig | fl

RunspaceId : f2f47343-3b16-4a00-afea-bf9fc47d8723
Name : SenderFilterConfig
BlockedSenders : {externalmail@email.cz}
BlockedDomains : {}
BlockedDomainsAndSubdomains : {}
Action : Reject
BlankSenderBlockingEnabled : False
RecipientBlockedSenderAction : Reject
Enabled : True
ExternalMailEnabled : True
InternalMailEnabled : False
AdminDisplayName :
ExchangeVersion : 0.1 (8.0.535.0)

ObjectClass : {top, msExchAgent, msExchMessageHygieneSenderFilterConfig}
OrganizationId :
Id : SenderFilterConfig
IsValid : True
ObjectState : Unchanged

Best regards
Jakub

office-exchange-server-mailflow
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

YukiSun-MSFT avatar image
0 Votes"
YukiSun-MSFT answered YukiSun-MSFT commented

Hi @JakubDobes-6077,

According to this offcial article, Sender filtering in Exchange Server is provided by the Sender Filter agent, which is by default enabled on Edge Transport servers but can also be manually enabled on Mailbox servers.

Do you have Edge server configured in your environment, or you are trying to configure Sender filtering on Mailbox server? If you are on Mailbox server, please make sure you have followed the instructions in the document below to install the antispam agents on Mailbox server:
Enable antispam functionality on Mailbox servers


If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi YukiSun,
I am trying to configure it on the Mailbox server. I followed the instructions mentioned by you.
As you can see on the "get-SenderFilterConfig | fl" shared output. The Sender Filter agent seems enabled, but does not work.

Is there any other command to check the state of the agent or server?

Best regards
Jakub

0 Votes 0 ·

Please post the internet headers of a message that gets through - remove the personal information.
By default sender filtering only works on external sent messages, if the message is seen as internal, it wont block it.


0 Votes 0 ·

Hi Andy,
Anonymized internet headers of the message are attached.
The message is not blocked despite that it's sent from an external domain.
108630-headers.pdf


0 Votes 0 ·
headers.pdf (51.1 KiB)

Hi @JakubDobes-6077,

It's been a few days and I am checking in to see how everything is going on with this thread. Feel free to let us know if the provided suggestion is helpful or if you need any further assistance.


If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

0 Votes 0 ·

Hi @JakubDobes-6077,

The "Enabled : True" returned in the "get-SenderFilterConfig | fl" output means Sender filtering has been enabled, which is not equal to the status of the Sender Filter Agent.

Normally if you have followed the instructions, the antispam agents should have already been installed on your server. To verify it, you can run the command below:

 Get-TransportAgent "sender filter agent"

108910-1.png

0 Votes 0 ·
1.png (2.9 KiB)