Groupshield 7.0.1 rejects mails sends from Hp 4345

[lhernandez]

Email sent from a HP 4345  are not delivered to recipients. I find no traces of them in the detection of GSE 7.0.1. When I stop GSE services if delivered emails.

Maybe I can make an exclusion for the shipping service name in this case is:

X-HP-DIGITAL_SENDER: HP Digital Sender Service

Or, how to permit this mails.?

The internet Header of a email received is (I change the names and IP address):

Received: from 192.168.90.105 (192.168.90.105) by srv-exchange.abcxabc.com

(192.168.90.95) with Microsoft SMTP Server id 8.1.240.5; Tue, 3 May 2011

09:30:28 -0430

MIME-Version: 1.0

From: "=?utf-8?Q?RODRIGUE@abcxabc.com?=" <prodriguez@100x100banco.comrodrigueprodriguez@100x100banco.com@@abcxabc.com>

Subject: =?utf-8?Q?prueba?=

To: "=?utf-8?Q?

rodrigue@abcxabc.com?==?utf-8?Q?PRODRIGUEZ@100X100BANCO.COM?=" rodrigue@abcxabc.com>

X-HP-DIGITAL_SENDER: HP Digital Sender Service

Content-Type: multipart/mixed; boundary="=cMc_xLc_8iL08i205U.511987"

Content-Transfer-Encoding: 7bit

Message-ID:

<mailto:8fe05923-63d2-48a0-bf0a-9a0f87ac95da@srv-exchangecas.100x100Banco.commailto:8fe05923-63d2-48a0-bf0a-9a0f87ac95da@srv-exchange.abcxabc.com8fe05923-63d2-48a0-bf0a-9a0f87ac95da@srv-exchangemailto:8fe05923-63d2-48a0-bf0a-9a0f87ac95da@srv-exchange.abcxabc.com>

Return-Path: rodrigue@abcxabc.com

Date: Tue, 3 May 2011 09:30:28 -0430

El mensaje fue editado por: lhernandez on 03/05/11 09:49:57 AM CDT

[Aidan]

Is GSE701 Patch 1 installed (ver 7.0.1309.100)??

Is GSE on the receiving server running VSAPI or Transport Scanning??

Does it matter to outcome if GSE is running only Transport scanning or only VSAPI scanning??

Does anything with Red X appear in "Recently Scanned Items" when an item is sent through from HP??

What exactly is sent from HP system - is the mail a scanned item?? (scan to mail)

If large item - does the HP driver offer splitiing large items into smaller parts??

[lhernandez]

Hi, Aidan

enable the report to the spam and saw that GSE is applying a rules, this rules are BODY_ATTACH_ONLY,INVALID_MSGID,MP_MIXE.

that way exclude these emails for this rule?

and yes is scan to mail, the attachment is a pdf or jpg.

[Aidan]

Is there a specific e-mail address (or can there be) assigned to the HP machine?? This could be added to the whitelist.

Secondly  the fact it has one spam trait listed in the header report does not mean the spam scanner took the action - the spam scanner action will only be taken based on an overall score (the low, medium & high score) and a different action assigned to each of these.

(is that the only one listed in the header )

So are all items getting  a score which will meet with delete criteria for your spam detection actions  - like overall spam score is 16 and you have High set to 15 and delete message (no log or quarantine option added)??

Basically we need to know whether it is in fact the spam scanner taking the actiion and not any other filter - such as corrupt filter, mail size etc etc etc.

Also can you verify that GSE701 Patch 1 is installed (ver 7.0.1309.100)??