Symptom 

  • Users are receiving spam mail from external email ids 

Solution

  • Refer to the steps mentioned here to blacklist an external email id or a domain for all users 
  • Ask end-users to blacklist the external id from the Quarantine report received to them through email