Illegal email address in inbound emails

[erlfos]

Hi

I am trying to set up event monitoring for HP iLO4. I tried SNMP, but it is so hard to map all the events and traps via the Event Rules due to how the HP iLO MIBs are structured. I would therefore like to integrate these events via email. There are so few events that it should not be an issue with volume. However, I have ran into another issue I need help to solve. The emails sent from the HP iLO interface to SNOW end up in the "Junk" table because of this error string: "Email set to ignored because of disallowed from address, email_address_filter_reason = Illegal address".

I think this is because the FROM address is based on the iLO hostname and contains a '.', these are the headers:

From:=?utf-8?q?iLO=20ILOCZ3641TXVD?=<ILOCZ3641TXVD.@ourdomain.com>
To:ourinstance@service-now.com

Is it possible to allow this address somehow? Emails like these worked fine with our previous event management system (Pagerduty).

[Maik Skoddow]

Hi @erlfos ,

please have a look into module System Mailboxes > Filters. You can find there respective filter and deactivate/customize it.

Kind regards
Maik

If my answer replied your question please mark appropriate response as correct so that the question will appear as resolved for other users who may have a similar question in the future.

[erlfos]

Yes, I should have mentioned that I have already looked in the filters and found nothing that indicates that the filters are responsible for this. We only have the default filters configured.

[Maik Skoddow]

Hi erlfos,

are you sure?

If you go to https://<YOUR INSTANCE>.service-now.com/sys_email_filter.do?sys_id=2cc1b20397320100715a390ddd2975c0

you will find the filter that moves emails to junk folder. And I think in your case the smtp server has added the respective headers before.

Kind regards
Maik

If my answer replied your question please mark appropriate response as correct so that the question will appear as resolved for other users who may have a similar question in the future.

[erlfos]

I have checked these headers in my email and they don't match the filter.

This is the filter you mentioned:

These are the "X-ServiceNow" headers in the email from the HP iLO4 server:

X-ServiceNow-Spam-Flag:NO
X-ServiceNow-Spam-Score:0.744
X-ServiceNow-Spam-Level:
X-ServiceNow-Spam-Status:No, score=0.744 tagged_above=-999 required=6.2
tests=[BAYES_05=-0.5, MIME_QP_LONG_LINE=0.001,
NUMERIC_HTTP_ADDR=1.242, SPF_HELO_NONE=0.001, SPF_PASS=-0.001,
URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no