hdokes,

Can you please stop SpamFilter, delete (or rename) the SpamFilter/corpus directory, and then restart SpamFilter? That should clear and reset the corpus statistical database for the bayesian filter in case it was corrputed.

hdokes,

...it is impossible to have a situation where a company blocks 100% of the spam and yet allows 100% of legitimate emails to go thru. Even if there was a human rather than a computer monitoring all emails, they would make a mistake every now and then.

We are very familiar with the Barracuda, and I'm afraid I doubt your old customer is being 100% honest with you

It takes several months before a new email address is distributed amongst the various spammers. If possible, you could try to advertise two email addresses, one for each software/domain, so that the comparison will be more "fair".

Please do note that SpamFilter acts upon the "real" email address specified in the email. This is often referred to as the "Envelope" address, or the "Return-Path" address. It is the email address that is provided by the sender's server in the "MAIL FROM" SMTP command.
SpamFilter logs this address in the following header:
X-SF-RX-Return-Path: <some_email_address@here.com>
 
And it also should appear in the "standard" header:
Return-Path:  <some_email_address@here.com>

The "From:" header is used by email clients to display any email address the sender wants, it's not the real address were email bounces are sent to. SpamFilter thus ignores any addresses specified in the "From" headers.

If spam emails are still coming thru even though, and the actual sender is indeed the same address as the recipient as can be verified with the above information, can you please also check the email headers to see if the email was whitelisted by any of your other filters? You can do that by looking for the header:

X-SF-WhiteListedReason=*some reason will go here*

If an email is whitelisted, it will bypass all filtering rules.

This said, if you are still having problems with these emails not being blocked, if you can please zip and email us the following:

     •     Your SpamFilter.ini file
     •     Your \SpamFilter\Domains directory tree structure
     •     Your SpamFilter’s activity logfile for a day these emails were received
     •     The to/from email addresses for 2-3 emails that were incorrectly allowed thru

We will try to debug your logs to see what is happening. If  the zipped file is over 5MB in size, please upload it to our FTP site, for which I'll send you the login info via a PM.