Print Page | Close Window

Alot of spam emails not filtering

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6865
Printed Date: 27 December 2024 at 9:20am


Topic: Alot of spam emails not filtering
Posted By: ebtsup
Subject: Alot of spam emails not filtering
Date Posted: 17 August 2010 at 7:06am
Not sure if we are missing something in the set-up; but for the few domains that we are testing with, we are getting a lot spam getting through the filters.
I have read the documentation... and '** believe **'  that i have the correct settings...

Is there some other review or process I can do to check???


Replies:
Posted By: yapadu
Date Posted: 17 August 2010 at 10:12am
Have you checked the headers of the messages to ensure they really passed through spamfilter?  You might also see in the headers that spamfilter adds why the message passed through (too big, whitelisted etc.)

-------------
--------------------------------------------------------------
I am a user of SF, not an employee. Use any advice offered at your own risk.

Posted By: ebtsup
Date Posted: 17 August 2010 at 10:48am
yes we are checking the headers... SF has its own I/P - which shows up in the header.
'=====================================
Received: from mail.XXXXXX.com ([192.1XXXXXXXXXX])
        by XXXX.mydomain.com (XXXXXXXX Process v1.0) with SMTP id KLN74787
        for <sales@XXXX,com>; Tue, 17 Aug 2010 05:33:47 -0500
Received: from 67.50.37.140 by mail.XXXXXXXX.com (LogSat Software SMTP Server); Tue, 17 Aug 2010 05:33:46 -0500
From: steel buildings <steelbuildings.zcblu@spofwx.waspins.net>
To: sales@XXXXXXX.com
References: <0ZX8.BJUNB$NKC.wNC.X0W00Y>
Subject: Durable Steel Buildings for All Occasions.
Date: Tue, 17 Aug 2010 03:28:04 -0700
Message-ID: <201008032804.jrcvj$vsk.evk@spofwx.waspins.net>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_0933_0EC475BE.93FAC8CE"
X-Server: LogSat Software SMTP Server
X-SF-RX-Return-Path: <steelbuildings.zcblu@spofwx.waspins.net>
X-SF-HELO-Domain: elkin140.fullmatrixmonster.com
X-SF-Originating-IP: 67.50.37.140

Posted By: LogSat
Date Posted: 17 August 2010 at 10:15pm
ebtsup,

From another of your posts I believe you may have configured SpamFilter to actually simply "tag" spam emails and to deliver them, instead of blocking them. This would explain why you are receiving a lot (actually all of it) spam.

If the spam continues to arrive even without either of the "Tag and Deliver" options enabled, please contact us via email at support at logsat dot com so we can gather more info on your configuration and see what else could be happening.


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: ebtsup
Date Posted: 18 August 2010 at 6:35am
After we turned on greylisting.... the majority of the above spams decreased.  (see the post on Tag Deliver.   So we are back down to where we are hoping.  We will take you up on you offer for reviewing what we are doing (as far as configurations). 
Thanks

Posted By: Rifleman
Date Posted: 16 June 2011 at 11:13am
I have greylisting on and the amount of daily spam getting past is still unacceptable. So many emails that are getting false positives as well. 

Posted By: Rifleman
Date Posted: 22 June 2011 at 12:37pm
I am also getting an inordinate amount still getting past. Was able to get great help regarding the .info domains from forum member Yapadu. 

Everyday, a few people (including myself) get a LOT of spam. Sometimes in the excess of 90 to 100 an evening.

Posted By: yapadu
Date Posted: 22 June 2011 at 8:51pm
Sounds to me like something is not working quite right with your system.  We have domains that get hundreds of thousands of messages into quarantine a week and no one would get 100 messages a day slipping past.

Are you using MAPS servers?  These are the ones I use on my personal domain:

bl.spamcop.net, true
cbl.abuseat.org, true
combined.njabl.org, true
dnsbl.sorbs.net, true
zen.spamhaus.org, true
b.barracudacentral.org, true

Also ensure you have SPF, SFDB and SFDC enabled.

Just trying to figure out what might be wrong, as something is not working right to let all that email past.

We do create manual filters, but that stops a very very minor amount of the overall spam volume that is stopped.


-------------
--------------------------------------------------------------
I am a user of SF, not an employee. Use any advice offered at your own risk.

Posted By: Rifleman
Date Posted: 25 July 2011 at 11:47am
I just changed the MAPS to reflect your list above. SPF is enabled, but do you have pass or fail in "neutral" ?  SFDB is set to 2, and SFDC is set to 2 as well.

Thanks in advance. 


Print Page | Close Window