Howto check if SPAMer will be recognized by IronPort?

Unanswered Question
Jul 1st, 2007

Last week, we had a mail-flood from one german sender. We sent this SPAM-Mail to IronPort and on the same time, we added a content-filter especially for this sender (work perfect).

In the mail-logs, I can see the last entry of this sender before the content-filter was updated.

How can I check now, if this sender-adress is recognized by IronPort as SPAM? Is there a logfile for the content-filter where I can check if this address is still active?

How do you manage such a situation?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
bvanzant_ironport Mon, 07/02/2007 - 10:48

You can search your mail logs for the sender address. When you find a message ID (MID) that is associated with that sender you can check if that MID was found to be spam positive or if it hit the content filter.

This will work because the spam scan is done before content filters.


This Discussion