будет лучше, если вы покажете заголовок письма со спамом (чтобы понимать, что мы говорим имеено о том, с чем вам пришлось столкнуться).
Received: from EX-02.global.stolline.ru (192.168.208.19) by
EX-02.global.stolline.ru (192.168.208.19) with Microsoft SMTP Server (TLS) id
15.0.1178.4 via Mailbox Transport; Wed, 28 Sep 2016 17:08:56 +0300
Received: from EX-01.global.stolline.ru (192.168.208.5) by
EX-02.global.stolline.ru (192.168.208.19) with Microsoft SMTP Server (TLS) id
15.0.1178.4; Wed, 28 Sep 2016 17:08:56 +0300
Received: from mail-01.global.stolline.ru (192.168.208.35) by
EX-01.global.stolline.ru (192.168.208.5) with Microsoft SMTP Server id
15.0.1156.6 via Frontend Transport; Wed, 28 Sep 2016 17:08:56 +0300
Received: by mail-01.global.stolline.ru (Postfix, from userid 1000)
id 31B8A2B07; Wed, 28 Sep 2016 17:08:05 +0300 (MSK)
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
mail-01.global.stolline.ru
X-Spam-Flag: YES
X-Spam-Level: **********
X-Spam-Status: Yes, score=10.8 required=6.0 tests=BAYES_50,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_MSPIKE_BL,
RCVD_IN_MSPIKE_L3,RCVD_IN_PBL,RCVD_IN_PSBL,RCVD_IN_XBL,RDNS_NONE autolearn=no
autolearn_force=no version=3.4.0
X-Spam-Report: * 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
* [score: 0.5000]
* 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
* [Blocked - see <http://www.spamcop.net/bl.shtml?43.231.59.176>]
* 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
* [43.231.59.176 listed in psbl.surriel.com]
* 0.0 RCVD_IN_MSPIKE_L3 RBL: Low reputation (-3)
* [43.231.59.176 listed in bl.mailspike.net]
* 3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
* [43.231.59.176 listed in zen.spamhaus.org]
* 0.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
* 1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
* [43.231.59.176 listed in bb.barracudacentral.org]
* 0.0 RCVD_IN_MSPIKE_BL Mailspike blacklisted
* 0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
Received: from [43.231.59.176] (unknown [43.231.59.176])
by mail-01.global.stolline.ru (Postfix) with ESMTP id 2CEFDAD
for <oleg@stolline.ru>; Wed, 28 Sep 2016 14:08:04 +0000 (UTC)
From: <scanner@stolline.ru>
Subject: *****SPAM***** Message from "CUKPR0985314"
To: <oleg@stolline.ru>
Date: Wed, 28 Sep 2016 19:38:03 +0530
Message-ID: <20160928193803567186257KX.DCSML-S000990000.E78BC9C8BA43A67B@stolline.ru>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="_5ef182f19164b-7bfb6cae-06858ec0-1b20a-ec6879e08547630b4_"
X-Spam-Prev-Subject: Message from "CUKPR0985314"
Return-Path: scanner@stolline.ru
X-MS-Exchange-Organization-Network-Message-Id: b4152878-18de-4ad4-5456-08d3e7a8fc61
X-MS-Exchange-Organization-AuthSource: EX-01.global.stolline.ru
X-MS-Exchange-Organization-AuthAs: Anonymous