Email, Spam Control, Still receiving email from someone on Block List
Solution: The address from which an email message appears to come is often not the actual sender. If you look at the full headers of the email message (see solution Email, Exchange, How do I view mail headers? ), you can find the actual email address of the sender listed in the X-Spam-OrigSender field.
Problem: I put someone on my Personal Block List, but I'm still receiving email from them.
For example, the email message might be listed as being sent "From:" firstname.lastname@example.org but the X-Spam-OrigSender lists the mail address as "email@example.com". So if you added "firstname.lastname@example.org" to your Block List, the email would from @cooldude.usa.com could still make it through. If this domain is constantly sending spam, you can block all email from the domain by adding it to your block list. e.g. cooldude.usa.com
Spammers constantly change the true address on messages to circumvent block lists. While the Proofpoint Spam Control filters are updated daily, it's not 100% effective because of the dynamic nature of spam. One way you can help update the spam signatures to identify new spam campaigns is to forward the offending email to email@example.com. Email sent to this address is automatically submitted to Proofpoint for spam evaluation and if the email is determined to be spam, they will generate a new spam signature and update our email relays.
To learn more about the Spam Control service please refer to the KB article: Email, Spam Control, Spam Control FAQ.