I receive a large amount of spam/marketing mail from commercial email senders that send on behalf of other companies. In one example I get information via constantcontact from one company that is useful. The other 1,000 companties that use the constantconact service send garbage marketing newsletters all day long. I have newsletter blocking enabled, but this catches so many things that are not newsletters that I still need to utilze whitelists/blacklists to make up the difference.
Since messagelabs only looks at the Envelope (smtp) sender (http://www.symantec.com/connect/forums/messagelabs-blocked-sender-still-sending-emails-us) and not the From: address I cannot selectively block/allow specific senders that utilze these commercial services. I have to allow or block the entire service which is very heavy handed.
This seems to be a major limitation of the product to not allow for furhter tuning of the sender based on the From address.
I looked into using Data Protection policies to scan header info, which works, but I am unable to then send messages that do not match my "whitelist" to a users quarantine. I have to choose whether to block, allow, or redirect. Again, very heavy handed and since anti-spam policies are evaluated first, I would have to globally whitelist the commercial email providers and then maintain a list of "good" From addresses via data protection and hope nothing changes or the mail will not be sent to quarantine, only blocked.
How do people deal with this and keep their sanity?