If you're still having issues, feel free to rename the .zip file to another extension, or to send it from another email address. If you'd like for us to download the file from any website you can upload it to (or a DropBox account), we'll be glad to do that as well.

PS - sorry for the PM mailbox, someone bombed us with messages and I did not clear it in time.

We finished debugging your logfile, but everything seems to be working pretty much correctly. Let me give you an example. The logfile you forwarded us shows 4,179 connection attempts. Of those connections, SpamFilter accepted and delivered only 1,177  emails. 418 of these emails were whitelisted, so SpamFilter identified as clean 759 emails out of 4,179. This means that SpamFilter only allowed 18% of your total email traffic thru. Not counting the whitelisted emails, SpamFilter thus identified as spam and blocked about 82% of your total SMTP traffic. That is a bit better than the average 70%-80% we usually see.

Now, assuming that one out of two emails you receive in your mailbox is spam (thus 50%), this still means that SpamFilter incorrectly allowed thru 50% x 759 = 380 emails. So SpamFilter would have incorrectly identified as clean only 380 emails out of 4,179. This is an accuracy of 91%, which is instead a bit lower than what we'd normally see (95%-99%). This may be caused by the relatively large number of whitelisted emails, but looking thru them they do appear to be mostly legitimate emails - no spam was incorrectly whitelisted.

If you'd like for us to check some specific emails that were allowed thru, regardless of keywords and blocked domains, if you can please zip us some samples that were received on Jan 3rd (the day of the logs you sent us), I'll be glad to look into that as well. Please ensure to send us the actual, original email (headers and source). Simply forwarding an email "inline" will completely alter the content making it impossible to obtain the original format.

Please do note that SpamFilter uses the "envelope" sender email address when performing checks against the sender's domain/email. This "envelope" email address is what is specified in the "MAIL FROM" SMTP command, and usually appears as the "Return-Path" address in the email's headers. SpamFilter does not use the email specified in the "From:" header, as that is only used to display a name/email in the "From" field in email clients, and is not the actual address used by mail servers to route emails.

Also to notice is that, for keywords, SpamFilter checks for them in the source of an email. Spammers could write an HTML email with words that "look" in a certain way to the human eye, but when looking at their actual HTML code, they will be much different. So when creating keywords to block content, you'll need to check the actual source of the emails to ensure the keywords match the source.