Rounded Top
Password Hint If you have not signed in recently, your password may be your Customer ID. Check your email archives for your Customer ID or reset your password.

Knowledge Base

How to redirect blacklisted emails to the Junk folder (Exchange 2007/2010)

Article was last updated on January 9, 2017. View products that this article applies to.

Preface

The following article provides step-by-step instructions to redirect all emails blacklisted by ORF to the recipients' Junk folder instead of rejecting them. This could be useful if your users wish to review blacklisted emails to make sure no legitimate email has been blocked.

This article is for Exchange 2007/2010: if you have Exchange 2003, follow the steps described in this KB article instead. Exchange 2013 users should consult this KB article.

Exchange Configuration

  1. Start the Exchange Management Console
  2. Expand Organization Configuration / Hub Transport and select the Transport Rules tab
  3. Click on New Transport Rule in the Action pane
  4. Name the rule (e.g. SCL of ORF-tagged emails). You can add a comment as well.
  5. On the Conditions page, select the condition to trigger this rule: When the subject field contains specific words
  6. Set the specific word to [SPAM] (the tag we will use in ORF)
  7. On the Actions page, select the action Set the spam confidence level to value
  8. In the rule description, click on the 0 link and add a value that’s above your SCLJunkThreshold, e.g., 9, and click Next
  9. On the Exceptions page, click Next again
  10. Click New, then click Finish.

Alternatively, you can create the same rule using the Exchange Management Shell by issuing the following commands:

$condition = Get-TransportRulePredicate SubjectContains
$condition.words = @("[SPAM]")
$action = Get-TransportRuleAction SetSCL
$action.SCLValue = 9
new-TransportRule "Stamp SCL" -condition @($condition) -action @($action)

ORF Configuration

  1. Start the ORF Administration Tool
  2. Expand Filtering / Tests in the left navigation pane
  3. Assign all blacklist tests to On Arrival
  4. Expand Filtering / Actions
  5. Click the Edit button under On Arrival and select Accept email and perform further actions
  6. Check Tag email subject with the text below and enter [SPAM]
  7. Click OK and save your settings by pressing Ctrl + S.

Changing the filtering order

The above method requires that ORF tags the email before the Content Filter Agent evaluates the email and assigns an SCL value. Please consult our KB article to ensure that ORF tests incoming emails first.

The Content Filter Agent of Exchange may drop emails before they could reach the Junk folder. To ensure this does not happen, you can disable the Delete, Reject, and Quarantine actions of the Content Filter Agent using the following command using the Exchange Management Shell:

Set-ContentFilterConfig -SCLDeleteEnabled $false -SCLRejectEnabled $false -SCLQuarantineEnabled $false

If everything was configured properly, ORF will tag blacklisted emails, the Transport Rule will increase the SCL score of the tagged email to 9, and it will land in the Junk folder of the target recipient.

Applies To

The article above is not specific to any ORF versions.