Noticeably increased amount of spam with Ironport

[nikolay.evdokimov]

Hello,

We are using Ironport C170 for several clients. All the clients have a lot more untagged spam emails during last two weeks. Is it expected? Maybe there is some new known bot-net activity on the Internet?

Thanks,

Nikolay

[Andreas Mueller]

Hello Nikolay,

bot activities should not result in the numbers of spam increasing significantly, of course at the beginning of a campaign there will always be something slipping through, but this should not be a permanent issue. I'd suggest that you check your system monitor, in the inbound section the number of messages blocked by reputation filtering should be in the 85 to 90 (or higher) range, if not then maybe there is something wrong.

Also, use message tracking to figure out which sendergroups the missed spam has been hitting, often the reason for that is a host that is whitelisted in the HAT and does not get scanned by IPAS.

Hope that helps,

Andreas