Stopping spam mails that you apparently wrote yourself

Do you receive spam emails that apparently come from your own or from a colleague's address? There are several ways of solving this problem in iQ.Suite. We show you one solution here.

Step by step:

• The standards on which email is based allow scenarios in which information about the email sender or recipient can be faked. There are always two types of sender and recipient addresses.
• SMTP addresses: these are comparable with the address on a letter envelope and are used to deliver the email.
• Mail addresses: these are comparable with the address on letter paper and are shown in the email clients.
• As a result you can, for example, receive an email that has been transferred over the Internet but shows your own email address as the sender in the Outlook client.
• The extended spam filter job is the main way of detecting and blocking such emails. You can, however, also detect these emails by using a simple address filter.
• To do this, we will create a new Wall email address filtering job.
• First, this job needs to process all emails that are received from the Internet via SMTP.

• As another option, we choose Following Headers and Values on the Conditions tab.

• We now look for emails that use an internal address as the mail sender. To do this, we look in the From field for email addresses that contain the internal email domain.

• These emails are then, for example, moved to an appropriate quarantine area. 
• Important: this job only functions in this way from iQ.Suite 7.x on.