[RKDinOKC]

Our marketing department sends notices with mailchimp. The default for spam filters is to block mailchimp because despite what mailchimp says a lot of malicious spamers use mailchimp. When sending from mailchimp it sends from and email address of the user with the account, but the relpy to address is a mailchimp address. So I made a rule that looks at any emails from outside our organization that have an from address with our domain. It compares that email to a list of approved mailchimp senders. If they are in the list it sends it with 0 spam score. If they are not in the list it blocks the message.

This worked great for 2 years. Then we got the new spam filter, proof point, and I was not made an admin. It immediately started blocking all mailchimp emails. The new proof point admin whitelists all of mailchimps ips. Which is a hassle because that list has to be maintained almost weekly.

It works for a couple of days, then the marketing department changes who is sending mailchimp emails and they get blocked. The proof point guy says my rule does not have the IPs addresses in it and turns off the rule. Within 30 minutes we get a mailchimp spoofed email to a user that copies and send itself to 70 of our users and others outside our organization. And proof point is supposed to stop all malware too.

All IT management can say is...we need to manage our spam filter in one place. Don't have a problem with that, but you also need someone to manage that spam filter that knows what the heck they are doing not just whitelisting IP addresses. Learned that before spent my first year managing spam filters and that was 28 years ago!