internal mail now being flagged as spam

[five0.4tluv]

We have 1 Zimbra NE Server (v.6.0.9_GA_2687). Starting around 12/26/2010, user to user emails (not all) are starting to be flagged as Spam. Previously everything was seemingly working as expected. No changes to the server have been made.

Where should we start looking for clues?

[five0.4tluv]

yes, already on it.

we have an "interesting" setup here. but nothing has changed on the servers to account for this issue.

[phoenix]

You could start by looking at the headers (show original) of a 'spam' email and see what the problem is.

[five0.4tluv]

yes, already on it. what is interesting is that the senders are using the web client sending to another zimbra user on the same server. does the server not consider itself trusted?

[five0.4tluv]

the particular user that is getting flagged is using the Outlook connector externally.

So the user is authenticated to the server using port 80 externally.

The header shows his external IP as the source
X-Originating-IP: x.x.x.x, thus not being in the ALL_TRUSTED

my question is why is an authenticated user and listed GAL user NOT being trusted?

[maxxer]

https://bugzilla.zimbra.com/show_bug.cgi?id=53060

[ewilen]

Bug 44384 – Bypass SA for emails sent from internal ZWC users (or provide a way to score them)