I need a solution
Strange and interesting things happen with my anti-spam ...
A few days ago noticed a strange thing, I will briefly describe:
For example:
1) comes 10 are exactly the same spam message (with the same address, the same Subject, the same content.) Such as Subject: "This is spam"
2) 7 random emails AntiSpam, marked as spam, and sends them to a special address.
3) The remaining three letters are throu spam intact. But fall under the transport rule on EDGE server, which only adds to the string keyword (Transport_Rule ***), and sends these messages to the same special address.
At this point, we have Subject: Transport_Rule *** "This is spam"
4) at the time the e-mail where sending, antispam understand that this is spam e-mail, it appends to this Subject: EDGE_Antispam and forwards to the same special email address.
So here we have the subject line EDGE_Antispam Transport_Rule *** "This is spam"
And here is the question :) Why not just marked all 10 email messages as spam at the begining?
It turns out that I need in addition to antispam configure additional transport rules, creating more pressure on the server.
And if I have something do not specify in transport rules, it turns out that some of the email messages freely enters the organization.