Hi Eli,

which product and version is this?
when you say "user", are you referring to the sender or recipient of the original email?
what does the product do with spam messages?

Regards,

Federico

Hi Federico
I am referring to the Symantec Mail Security . You can see it in the mail provided.
When I say "user", I mean the recipient of this mail. The SMS quarantines the spam message and somehow few users are getting this mail with the two attachments provided.
This message comes from :  From: Mail Delivery System [mailto:MAILER-DAEMON@big.boi.gov.il] , ehich is the SMS product itself.

Thanks
Eli

Hi Eli,

still we have several Symantec Mail Security products. The following page contains a list of them:
www.symantec.com/business/support/all_products.jsp
I'm guessing is SMS SMTP 5 but still you have to confirm this and the patch level it has eventually.

Thanks,

Federico

Hi Federico,
It is SMS version 7.6.1-7
I don't see any patch level.

Thanks
Eli

Hi,

the sender of the original message seems to be a valid user that has been spoofed and used as sender. The user you report seems to have received a bounce after a message has not been able to be delivered to 10.0.7.136 and I'm not sure the reason for this bounce as I don't have access to your SBG configuration and environment details. 
First suggestion if that you upgrade SBG to verison 8 and make sure is configured according to the best practices article (see below)

Don't know if it is expected to receive inbound messages from your own domain. Depending on that you can consider the following KB article:
service1.symantec.com/support/ent-gate.nsf/docid/2008111714541154

To get the most of your product I'd also suggest you have a look at this KB article:
service1.symantec.com/SUPPORT/ent-gate.nsf/docid/2008080612113754

Hope this helps,

Federico

I will try these articles solutions.

Thanks
Eli