exchange/outlook moving random ORF whitlisted email to junk folders RSS


Something is causing random emails to be moved to outlook junk folders. I believe this just started sometime this week (no recent changes to the servers) and the emails are whitelisted by ORF. we have two exchange servers 2010 and 2013 and all clients are outlook 2013. Is anyone else having this issue?

by bruce.neal 3 years ago

@bruce.neal: Hello Bruce,

I suspect that the MS Exchange Content Filter Agent ( redirects some of the emails, because the Spam Confidence Level (SCL) threshold values are not configured properly. The Spam Confidence Level threshold is the value at which a particular email is identified as potential spam and is acted on. If you set the SCL thresholds too low, you risk filtering messages that come from legitimate senders. I suggesting starting the investigation by reviewing the current SCL threshold values. The following article might prove useful to you:

Furthermore, analyzing the protocol logs of Exchange can help you to find the root cause of many mail-flow related issues as they capture the entire SMTP communication that occur between messaging servers. I recommend the following article on this topic:

Please let me know if this has helped to solve the issue.

by Daniel Novak (Vamsoft) 3 years ago
(in reply to this post)


@bruce.neal: We've often seen this when a user has accidentally turned on the built-in Outlook Junk E-mail filtering option. We set ours to "No Automatic Filtering"

You can find these settings in the Home ribbon tab, Delete section, Junk...

by Sam Russo 3 years ago
(in reply to this post)


@Daniel Novak (Vamsoft): thanks Daniel. The SCLJunkThreshold is set to 8. The headers I've checked are getting a score of 9. but that doesn't make sense since prior to this week everything was fine with the same addresses.

by bruce.neal 3 years ago
(in reply to this post)


@Sam Russo: we did check that and filtering option in Outlook is off.

by bruce.neal 3 years ago
(in reply to this post)


@Daniel Novak (Vamsoft): I believe this was ScanMail doing it. I shutdown scanmail and the problem has gone away.

by bruce.neal 3 years ago
(in reply to this post)


@bruce.neal: Thank you for the update Bruce. I am glad to hear that you have found the culprit :)

by Daniel Novak (Vamsoft) 3 years ago
(in reply to this post)

New comment

Fill in the form below to add a new comment. All fields are required. If you are a registered user on our site, please sign in first.

Email address (will not be published):
Your comment:

ORF Technical Support

Configuring, installing and troubleshooting ORF.

News & Announcements

Your dose of ORF-related news and announcements.

Everything but ORF

Discuss Exchange and system administration with fellow admins.

Feature Test Program

Feature Test Program discussion. Membership is required to visit this forum.

ORF Beta

Join the great bug hunt of the latest test release.

Customer Service

Stay Informed