____ spam mails getting through with scl -1

Question

Hi,
We've recently installed an exchange 2010 with forefront security for exchange.  We where happy to receive very little to no spam in our inbox.
But now since a week or so we get a lot of spam through. Very obvious spam like this:
Cheap ViagraPills start fr $1.85
GenericViagra:
** 25mg:
40 pills - $ 78
** 50mg:
30 pills - $ 99
270 pills - $499
** 100mg:
30 pills - $105
270 pills - $540
** 150mg:
20 pills - $139
** 120mg:
20 pills - $117
Optional: Delivery Insurance (Guaranteeed reshipment if delivery failed)
This in plain text is obviously spam. The header of the email says SCL -1.
Does anyone have any idea how come this is happening?
Don't forget about Alt+Esc!

Answer 1

Ok so here's the header:
Received: from vATS007.atsgroep.be (10.0.0.161) by vats003.atsgroep.be
 (10.0.0.121) with Microsoft SMTP Server (TLS) id 14.1.255.0; Sat, 6 Nov 2010
 19:39:56 +0100
Received: from bqcev (82.233.192.127) by mail.atsgroep.be (194.78.214.42) with
 Microsoft SMTP Server id 14.0.702.0; Sat, 6 Nov 2010 19:39:55 +0100
To: <[email protected]>
Date: Sat, 6 Nov 2010 12:33:45 -0700
Sender: <[email protected]>
From: Rubie Ema <[email protected]>
In-Reply-To: <aa0801cb7b22$7ee5d7eb$a3157d55@crwnk81>
Subject: GenericViagra: 50mg:30 pills-$99, 100mg: 270pills-$540, 150mg: 20pills-$139 sk
X-Sender: <[email protected]>
Message-ID: <[email protected]>
MIME-Version: 1.0
Reply-To: Rubie Ema <[email protected]>
Content-Type: multipart/alternative;
 boundary="----=_Part_49282_0715_05676809.BA20F319"
User-Agent: Mozilla/5.047 (Windows; U; Windows NT 5.0; U; NT4.0; en-us) Gecko/25250101
Return-Path: [email protected]
X-MS-Exchange-Organization-PRD: cs.com
Received-SPF: None (vATS007.atsgroep.be: [email protected] does not
 designate permitted sender hosts)
X-MS-Exchange-Organization-Antispam-Report: v=1.1
 cv=rT00GTpZ5MSp1ZxZFnbz90rwzC0u/eIJHHhk9TgDoBE= c=1 sm=1 a=7C9BXaI6PjcA:10
 a=GoqiXTz7-MIA:10 a=Bm5CGD5hNXwA:10 a=nsHQh+8dCwREoUYq5PAOiw==:17
 a=ie9QzACsAAAA:8 a=E_L80fFITzSPg6_BmNcA:9 a=cuI9EFUVpeGK_7-9qG8A:7
 a=noDXP0wlcfnoTGAvK9V8zB8UWL8A:4 a=CjuIK1q_8ugA:10 a=PMIgtkiIR_m9gaii:21
 a=KUoTCPfgi0dl5dgL:21 a=urt2cUY3a_t7NE3V:21 a=LK2Jkdhqki-MnjMQf5EA:9
 a=CqlJE-djHJjGR-XVuDkA:7 a=mjXP_EH4SfxCrkfH5ibzS5K3CuoA:4
 a=ZFUir7Rss4gDEpGH:21 a=L39HvqBh4ZPSvNEo:21 a=EgusNkTKHnttRevb:21
 a=nsHQh+8dCwREoUYq5PAOiw==:117;OrigIP:82.233.192.127;SCL:-1
X-MS-Exchange-Organization-AVStamp-Mailbox: MSFTFF;1;0;0 0 0
X-MS-Exchange-Organization-SCL: -1
X-MS-Exchange-Organization-SenderIdResult: NONE
X-MS-Exchange-Organization-AuthSource: vATS007.atsgroep.be
X-MS-Exchange-Organization-AuthAs: Anonymous
Don't forget about Alt+Esc!