cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Cisco Secure Email Support Community

Product Support Talos Support Cisco Support Reference + Current Release
Gateway Reputation Lookup Open a support case Secure Email Guided Setup
Gateway: 14.0.1-033
Cloud Gateway Email Status Portal Support & Downloads docs.ces.cisco.com
Email and Web Manager: 14.1.0-227
Email and Web Manager Web & Email Reputation Worldwide Contacts Product Naming Quick Reference
Reporting Plug-in: 1.1.0.136
Encryption Bug Search
Encryption Plug-in: 1.2.1.167
Cloud Mailbox Notification Service
Outlook Add-in(s): More info

2182
Views
0
Helpful
1
Replies
browndw999
Beginner

Message Rejection by 3rd Party ISP

The e-mail system was unable to deliver the message, but did not report a specific reason. Check the address and try again. If it still fails, contact your system administrator. #5.0.0 smtp; 5.3.0 - Other mail system problem 554-'5.7.1 Virus Heuristics.Phishing.Email.SpoofedDomain detected by the ClamAV AntiVirus' (delivery attempts: 0)...

Has anyone come across this type of error before? Mail can be sent only with text in the subject field. No new mails can be sent when data is added to the e-mail.

Thank you

David

1 REPLY 1
Andreas Mueller
Enthusiast

Hello David,

the remote end obviously uses ClamAV message scanning in their mailserver. Here's the explanation from the ClamAV FAQ:

  • Why is my legitimate HTML newsletter/email detected by ClamAV as Phishing.Heuristics.Email.SpoofedDomain?
    If it contains links in the form of href=”http://yourdomain.example.tld”> otherdomain.tld, where ProtectedDomain doesn’t belong to you and is listed in ClamAV database (like amazon.com, ebay.com, ...) then ClamAV detects it as a phishing attempt.

  • My legitimate emails from yourdomain.tld are detected as Phishing.Heuristics.Email.SpoofedDomain
    Please submit a sample, marking it as a false positive, phishing. If it’s really a false positive, we will add a whitelist entry for it.

Source: http://www.clamav.net/index.php?s=Phishing.Heuristics.Email.SpoofedDomain

Hope that helps,

regards, Andreas

Create
Recognize Your Peers
Polls
Which of these topics should we host an event in the Community?

Top Choice: ISE Demo (100%)

Content for Community-Ad