"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
Some users, including those with a Blackberry or other mobile device, continue to receive spam even though anti-spam policy is enabled. This happens to users for whom a forwarding address has been configured.
First seen in PureMessage for Microsoft Exchange 3.0.0
1. Follow these steps to confirm the cause of this issue:
2. Add remote domain to the mail domains list:
Spam should be filtered at the edge server and mail forwarding rules should be applied on the hub transport server to avoid this problem. If you are unable to do this then add the remote domain to the mail domains list in PureMessage as follows:
The PureMessage anti-spam policy only scans inbound email as classified in Appendix C: How does PureMessage route mail? of the PureMessage for Microsoft Exchange Startup Guide. By default PureMessage classifies messages that are auto-forwarded to a remote domain, as outbound, meaning they are not scanned for spam. Adding the remote domain(s) means that they are now treated as inbound mail and scanned as such.
This issue may also be seen in the journal mailbox. Refer to the knowledgebase article PureMessage for Microsoft Exchange: spam arrives in the journal mail box even though anti-spam policy is enabled. Note that applying autoforwarding can also lead to duplication of emails.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.