PDF Spam cannot be filtered by IronPort?

Unanswered Question
Jul 27th, 2007

Recently, my company received many pdf spams although we have IronPort C100. Any solution for filtering PDF Spams?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
valter_ironport Fri, 07/27/2007 - 13:49

Try raising "Maximum Message Size to Scan", in IPAS settings. 131072 bytes should be enough. As this could represent some impact to your C 100 performance, if you think this could not be applied, please call IronPort Customer Support


verylongbloke_i... Fri, 07/27/2007 - 14:14

Also suggest any missed spam messages are submitted to the Customer Support team. Pls send these manually or using the plugin's for Outlook or Lotus Notes so that the headers are preserved. This will allow IronPort to look at what is being missed and deal with them. However IPAS is 97% accurate so some new/early spam is always going to be missed :(

jbivens_ironport Fri, 07/27/2007 - 15:31

Did you check the headers to insure that they came from IronPort?

I've run into several customer installs that had port 25 open to other mail and OWA servers that were either no longer or never published MX records that spammers found over time and it creates a backdoor for spam entry.

Double check the Received line in the headers to verify it came through the IronPort and forward all false negatives to [email protected].


Jay Bivens
IronPort Systems


This Discussion