Spam Mail pass ironport !!

[sam_ironport]

User alaways receive Spam mail from different Domain

account and all pass the Ironport anti-spam function.We found all

the spam cannot verify the sender Domain and address.For

Example someone sender display as "enochingelsi@vorclub.com"

but we check the ICID log and found the mail come from

domain "atom.host-care.com". Any one can help me there ?

[Wargot_ironport]

Do the mails Pass the IronPort Anti-Spam, or is the CASE Engine not running against the messages due to the reputation?

Are the senders falling into a Sender Group who's MFP doesn't have "Sender Verification" turned on?

Are you reporting these to the Spam address?