<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">One of my clients seems to be getting a lot of obvious spam but it’s not being seen as spam by the software. I detail part of the headers from one below. It is mainly in Chinese with the senders name forged and is quite obviously spam.
Are there any further settings I can change to eliminate more of this junk?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Received: from pop1.helpinternet.co.uk (192.168.200.90) by<o:p></o:p></p>
<p class="MsoNormal">WIN-QIQN22G6LHP.helpinternet.com (192.168.200.1) with Microsoft SMTP Server<o:p></o:p></p>
<p class="MsoNormal">(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id<o:p></o:p></p>
<p class="MsoNormal">15.1.1034.26 via Frontend Transport; Tue, 18 Aug 2020 19:14:11 +0100<o:p></o:p></p>
<p class="MsoNormal">Received: from wrqvrtcx.outbound-mail.sendgrid.net<o:p></o:p></p>
<p class="MsoNormal">(wrqvrtcx.outbound-mail.sendgrid.net [149.72.87.202]) by<o:p></o:p></p>
<p class="MsoNormal">pop1.helpinternet.co.uk (8.15.2/8.15.2) with ESMTPS id 07IIEXrw464121<o:p></o:p></p>
<p class="MsoNormal"> (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for<o:p></o:p></p>
<p class="MsoNormal"><alister.xxxx@xxxx.co.uk>; Tue, 18 Aug 2020 19:14:35 +0100<o:p></o:p></p>
<p class="MsoNormal">Received: by filter0410p1iad2.sendgrid.net with SMTP id<o:p></o:p></p>
<p class="MsoNormal">filter0410p1iad2-32474-5F3C1A88-D 2020-08-18 18:14:32.749396382 +0000<o:p></o:p></p>
<p class="MsoNormal">UTC m=+85512.410289618<o:p></o:p></p>
<p class="MsoNormal">Received: from service.com (unknown) by ismtpd0008p1maa1.sendgrid.net (SG)<o:p></o:p></p>
<p class="MsoNormal">with ESMTP id O8IISi4gTSm0UkF2jKkTUA for <alister.xxxx@xxxx.co.uk>; Tue, 18<o:p></o:p></p>
<p class="MsoNormal">Aug 2020 18:14:31.838 +0000 (UTC)<o:p></o:p></p>
<p class="MsoNormal">From: xxxx.co.uk <passport@service.com><o:p></o:p></p>
<p class="MsoNormal">To: Alister xxxx <alister.xxxx@xxxx.co.uk><o:p></o:p></p>
<p class="MsoNormal">Subject: =?utf-8?B?4p224pyJIOaCqOaciVsxMl3kuKrmnKrpgIHovr7pgq7ku7Y=?=<o:p></o:p></p>
<p class="MsoNormal">Thread-Topic: =?utf-8?B?4p224pyJIOaCqOaciVsxMl3kuKrmnKrpgIHovr7pgq7ku7Y=?=<o:p></o:p></p>
<p class="MsoNormal">Thread-Index: AQHWdYtfUbtLMTVjw0iRvqvDemCwEQ==<o:p></o:p></p>
<p class="MsoNormal">Date: Tue, 18 Aug 2020 18:14:32 +0000<o:p></o:p></p>
<p class="MsoNormal">Message-ID: <20200818111431.32A593EF0D4A7496@service.com><o:p></o:p></p>
<p class="MsoNormal">Content-Language: en-GB<o:p></o:p></p>
<p class="MsoNormal">X-MS-Exchange-Organization-AuthSource: WIN-QIQN22G6LHP.helpinternet.com<o:p></o:p></p>
<p class="MsoNormal">X-MS-Has-Attach:<o:p></o:p></p>
<p class="MsoNormal">X-MS-TNEF-Correlator:<o:p></o:p></p>
<p class="MsoNormal">x-spam-status: No, score=4.7 required=5.0 tests=BAYES_00,DCC_CHECK,<o:p></o:p></p>
<p class="MsoNormal"> DKIMWL_WL_MED,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_EF,FSL_BULK_SIG,<o:p></o:p></p>
<p class="MsoNormal"> HEADER_FROM_DIFFERENT_DOMAINS,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,<o:p></o:p></p>
<p class="MsoNormal"> MIME_HTML_ONLY,RATS_SPAM,RCVD_IN_BL_SPAMCOP_NET,SPF_HELO_NONE,SPF_PASS,<o:p></o:p></p>
<p class="MsoNormal"> TXREP,UNPARSEABLE_RELAY,URIBL_BLOCKED autolearn=no autolearn_force=no<o:p></o:p></p>
<p class="MsoNormal"> version=3.4.2<o:p></o:p></p>
<p class="MsoNormal">Content-Type: multipart/alternative;<o:p></o:p></p>
<p class="MsoNormal"> boundary="_000_2020081811143132A593EF0D4A7496servicecom_"<o:p></o:p></p>
<p class="MsoNormal">MIME-Version: 1.0<o:p></o:p></p>
</div>
</body>
</html>