When I look at the diagnostics page I see a warning about email in the outbound queue.  This instance is setup as spam firewall with smtp proxy enabled. The smtp server is not enabled so there should never be any outgoing email - where are they coming from ?

Possibly related - I occasionally get incoming emails rated with -1000 for "Sender has been authenticated by SMTP server". Again - SMTP server is disabled so where is this coming from.  I can't locate such a setting anywhere in order to disable this or at least assign a zero score.

Gerry,

Outbound queue exists even if you use the Proxy Server. When Proxy server is used in Asynchronous mode, it will accept the message and will then deliver it to the downstream server in a secondary thread, which could put the email in the Outbound Queue if the first delivery attempt fails.

Your second point is more important. If you do not expect anyone to use SMTP Authentication, the only reason you're seeing this message is that someone on the Internet has cracked a password on your Exchange (assuming that's your downstream server). Once they are able to crack a password, they will be able to send out-bound emails through Xeams.

We recommend not using the proxy server anymore. In fact, the new installation of Xeams does not even configure it. It exists for backward compatibility . Refer to http://www.xeams.com/SwitchingProxy2Regular.htm for instruction as well as the reason for this suggestion.

If you still want to use the Proxy server but want to disable assigning a -1000 score to authenticated messages, go to Filter Management/Score Configuration and uncheck Bypass Authenticated Users.