Hey Guys:
Thanks in advance for the help.
All of my emails go through a third-party spam filter prior to hitting my Exchange 2010 SP2 CU3 (Version 14.03.0123.003) email server.
I have a Transport Rule setup there to automatically delete anything coming in with the "X-SPAM-FLAG" = Yes. My spam filter marks this flag when it suspects spam.
I have ONE user who keeps getting a couple of spam every two weeks get through the system. I've looked at the log and verified that it is in fact deleting 99% of his spam, but 1% of it gets through sometimes.
I've also tried a rule to delete emails with "*****SPAM*****" in the subject line (the SPAM filter does this as well) and even THAT rule fails sometimes.
The weird thing is that it just seems to be happening for one user.
When I look at the email logs these emails appear just as any other email would, like nothing is wrong.
When I look at the header it shows the X-SPAM-Flag = yes.
I'm sort of out of ideas. Any help is appreciated.
