We experienced the following issue after implementing the McAfee Appliance in front of our Microsoft Exchange 2003 Server. The inbound SMTP comes through the Appliance and the outbound SMTP is routed by the exchange server using SMART HOST back through the appliance.
The McAfee Email and Web Security Appliance by default “we discovered”, also runs the spam filtering engines on our outbound mail and was then placing emails into quarantine. This then lead to external addresses being emailed quarantine digest reports that they shouldn’t have been sent and of course cant manage the quarantine interface anyway.
After reading the McAfee manual and documentation for the appliance there was nothing that highlighted how to exclude your outbound email from the filters. We did consider adding all our domains to the Spam whitelist senders but this would have of allowed spammers sending inbound emails spoofing our domains names to bypass the spam filters. “of course we don’t use reverse DNS lookup checks on inbound email as other mail servers are usually never configured correctly”
I then came across the following solution after testing the appliance rules so to resolve you just need to apply the following in your email polices.
- Login To your McAfee Email and Web Security Appliance interface
- Navigate to – Email / email policies
- Now Click Add Policy
- Give your policy a name “e.g. Exchange Outbound”
- Select Outbound Email Direction
- Now click the Add Rule button
- Select rule type – (Source IP) or (Source Host Name)
- Enter your mail server (IP Address) or (DNS Name) in eh value you field
- Now click ok
- Now Disable all the Spam checks on your new rule