My guess here is that you are using DNS blacklists to do most of the filtering. The problem is that for forwarded mail, the last IP address on the message is the forwarding server, NOT the spammer's server. We have this same problem in house.
I wish there was a way to scan ALL the IP addresses in the message, not just the connecting server. Does Declude do this?
Yes, Declude JunkMail lets you do this. The default setting is to only scan the IP that connects to the IMail server, but there is a lot of flexibility for scanning other IPs (such as scanning all IPs that the E-mail travels through, just bypassing the IPs of your gateway/backup mailservers, or just scanning up to one hop away from your server).
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
