I am having problems with some Spam messages making it through one of our SMG servers over the past several weeks, but gets properly flagged as Spam on another SMG server we have.
I am running two gateways… one gateway for inbound messages from the outside world, and the other gateway for outbound messages going to the outside world.
The inbound gateway is at version 10.5.2-3. The outbound gateway is at version 10.0.1-2. Timing wise... it seems coincedental that the Spam problems started when I upgraded to the newer software versions of SMG software on the incoming gateway.
Over the past few weeks our site (including myself) have been getting an abnormally high amount of spam related messages making it through the incoming gateway into people’s inboxes (including my own). In looking at the Message Audit Logs on the incoming gateway for these spam messages that are making it through… it says under verdict to “Deliver as Normal”. Some of these Spam messages are not being flagged as Spam or even Suspected Spam. Yet I know the spam filter is working on the incoming messaging gateway because if I sort incoming messages by a verdict of SPAM, I can see many in a day that are getting flagged properly as Spam, and getting deleted (the rule I have is… if a message is SPAM, delete the message).
So I don’t know why we are getting so many additional SPAM related email messages making it through our incoming gateway without being flagged as spam or even suspected spam.
YET… if I take any one of these SPAM messages that make it through our incoming gateway to my Outlook Inbox, and forward it to an external email account that I have… which then makes this same Spam message go through our Outbound gateway…. The outbound gateway sees this same message as SPAM, flags it as such, and deletes it. That’s the verdict and action I’m looking for from our inbound email gateway.
I don’t know why our inbound email gateway (newer software version) is letting some Spam related messages go through un-flagged as Spam… yet our outbound email gateway (older software version) is flagging these very same messages as Spam and deleting them.
Is there some sort of difference in the scanning engine between the two email gateway servers / software versions, where the older version of the software is more aggressive at scanning for spam messages compared to the newer software version?