Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 1693 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Internal spam?

SophosQuery
One of my internal (inside our firewall) users received this email from our Firewall in his inbox in reponse to trying to send an email to aaa.bbbbb@cccc.com.

What does this mean? The quarantine reason suggests (in an ambiguously worded warning,) Spam from my internal user? (I dont think so) 
 

From: SophosFirewall
Sent: Tuesday, 1 October 2013 8:57 AM
To: ***x ***x
Subject: Message delivery incomplete

Your message to the following recipients was quarantined:

, quarantine reason: Spam (confirmed)

Please contact your IT administrator for further assistance.


This thread was automatically locked due to age.
  • 0
    Hi.


    I think that you have to check on the first place for the email headers. There you can check what is the "origin" of the email address.
  • 0
    Hi, and welcome to the User BB!

    "Confirmed spam" means that the calculated "signature" of the email matched one for an email that CommTouch knows to be spam.  In Mail Manager, you can select 'Release and report as false positive" to diminish the chance this happens again.  The user also could do this in the User Portal.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Unfiltered HTML