Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 2475 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

outgoing mail to IBM marked as SPAM (confirmed)

JasonIstre
9.104-17

Started this morning.  Any mail that any internal user sends to us.ibm.com is coming back immediately as undeliverable.  I looked in the SMTP log and it shows  rejected from our exchange server to us.ibm.com for reason SPAM (confirmed).

How can I get more info like why it's confirmed spam?

It was like this for about 2 hours, then suddenly they started going through again.

Ideas?


This thread was automatically locked due to age.
Parents
  • 0
    ctasd reports 'Confirmed' is what I was looking for, and I see now that your original email had that information in it, but I didn't read it closely enough.  If you look in the file above the first line here, you'll see something like "RefID:str=0001.0A010208.520A6F45.0035,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0".  That was sent to CommTouch, and they reported a match with known spam.  After awhile, their system corrected itself.

    When one sees this, it's possible to get the situation cleared more quickly by selecting the emails on the 'SMTP Quarantine' tab and using the 'Release and report as false positive' selection.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    ctasd reports 'Confirmed' is what I was looking for, and I see now that your original email had that information in it, but I didn't read it closely enough.  If you look in the file above the first line here, you'll see something like "RefID:str=0001.0A010208.520A6F45.0035,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0".  That was sent to CommTouch, and they reported a match with known spam.  After awhile, their system corrected itself.

    When one sees this, it's possible to get the situation cleared more quickly by selecting the emails on the 'SMTP Quarantine' tab and using the 'Release and report as false positive' selection.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML