Spam quarantine issues

[pbabu6001]

One of our end user has already added "pdaniel@executivetechnique.com" to the safelist, but still the email coming this sender quarantined.

Please find the header of the email and suggest on why it was happened and how to resolve. Thank you!

Received: from [10.2.1.141] ([10.252.1.14:54630] helo=p2-jbsvcs5196.ad.prodcc.net) by 10.2.246.10 (envelope-from <A2ONHlg3RTLmRFKxz6StNHw==_1102089742857_jNWfMHKSEeWDidSuUnU5bw==@in.constantcontact.com>) (ecelerity 4.2.1.52273 r(Core:4.2.1.11)) with ESMTP id 17/FC-00395-902B6395; Tue, 06 Jun 2017 09:45:45 -0400
DKIM-Signature: v=1; q=dns/txt; a=rsa-sha256; c=relaxed/relaxed; s=144941; d=executivetechnique.ccsend.com; h=date:mime-version:subject:X-Feedback-ID:message-id:from:reply-to:list-unsubscribe:list-unsubscribe-post:sender:to; bh=zwmcbiIlgbwzylCs+WuDhHcq4G2YRN7jyaA9z6zP3LQ=; b=K5R1ezwcvowSd7PSAdLMYOJYd1x7dmRzyQHgYEnm7Nwsyg7OcwqjiyIODqAb0Sabyl2sASuxBriKOLOP/dJj/UJ9doRxwZxnfsEdKDygJz3NCcFXIVoerXb1ww1YT9k1/+fn3mBggbRVxqKtYjF36WQKzfjMsLo32/xR4V8dLK8=
Message-ID: <1128120089686.1102089742857.1311558085.0JL.2002@scheduler.constantcontact.com>
Date: Tue, 6 Jun 2017 09:45:45 -0400 (EDT)
From: John Connellan <pdaniel@executivetechnique.com>
Reply-To: pdaniel@executivetechnique.com
Sender: John Connellan <paula@executivetechnique.ccsend.com>
To: dustin.vinay@zurichna.com
MIME-Version: 1.0

[Libin Varghese]

Hi,

You would need to look at the message tracking details for the email to determine if SLBL was positive or negative and then take it from there.

If it comes up to be SLBL negative then it could either be the entry not added correctly, SLBL not updated on all appliances, etc.

I do not see X-SLBL-Result header provided or any other X-Ironport headers so cannot confirm what could have happened based on the information available.

Thank You!

Libin Varghese

[pbabu6001]

Thanks Libin for your quick reply and please find the complete header.

[Libin Varghese]

Emails that are safelisted are marked as safelisted with an X-SLBL-Result-Safelist header.

Emails that are blocklisted are marked as blocklisted with an X-SLBL-Result-Blocklist header.

As the header is not present, I would suspect an issue with the entries made in SLBL.

envelope-from is A2ONHlg3RTLmRFKxz6StNHw==_1102089742857_jNWfMHKSEeWDidSuUnU5bw==@in.constantcontact.com and From header is pdaniel@executivetechnique.com

If the entries have been confirmed on the appliance through which the email passed through, I would recommend a TAC case to perform further tests.

- Libin V

[pbabu6001]

User was safelisted "pdaniel@executivetechnique.com" in SLBL and does it enough to receive from that sender?

[Libin Varghese]

Yes, From header is checked by SLBL and the message tracking should show appropriate action taken if the SLBL matched.

- Libin V

[marc.luescherFRE]

Hi there,

this is rare case where sent by is used.

Sender: John Connellan <paula@executivetechnique.ccsend.com>

I would ask the user to whitelist this address.

-Marc