Print Page | Close Window

SFDC

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6785
Printed Date: 05 February 2025 at 6:00pm


Topic: SFDC
Posted By: ocis
Subject: SFDC
Date Posted: 16 December 2009 at 3:12pm
We are getting emails from a specific domain that are marked as spam due to SFDC filter match. It is legitimate email and we need help troubleshooting this issue. The only error message we get is :
 
X-Rejection-Reason: 26 - SFDC filter match
 
Is there any information that we can look for (in the rejection message) that can help us resolve this issue?
 
Thanks.



Replies:
Posted By: yapadu
Date Posted: 16 December 2009 at 8:16pm
Roberto might have some input for you, but why not just whitelist the domain and no more emails from that domain will be incorrectly stopped.


Posted By: ocis
Date Posted: 17 December 2009 at 8:29am
We were hoping there was another alternative. 


Posted By: LogSat
Date Posted: 17 December 2009 at 11:43pm
Originally posted by ocis ocis wrote:

We are getting emails from a specific domain that are marked as spam due to SFDC filter match. It is legitimate email and we need help troubleshooting this issue. The only error message we get is :
 
X-Rejection-Reason: 26 - SFDC filter match
 
Is there any information that we can look for (in the rejection message) that can help us resolve this issue?
 
Thanks.
Unfortunately there is not another alternative, other than increasing the threshold for this filter in the "SFDC" tab. 
The SFDC filter works based on a "digest" (a hash) created form the email's content. Messages with very similar textual content will share the same hash. Our SFDC database collects all these hashes in realtime for every single email processed by all the SpamFilter installations in the world. When we detect a spike in any hash for which the emails are being blocked by other types of filters, our SFDC server will determine that the specific hash, at that specific time, is characteristic of a specific wave of spam that is being circulated at the moment. This will cause all emails that have that one hash to be marked as spam. As all this occurs in real-time, usually there will be a time frame of 6hr-24hr during which this spike will occur and emails with similar content will thus be blocked. There is no way to determine the specific content that is causing this to happen, as the "digest" is created statistically based on the entire contents of the email, not specific keywords or phrases.


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Posted By: ocis
Date Posted: 18 December 2009 at 10:45am
Thanks for the response.


Posted By: Neolisk
Date Posted: 13 January 2010 at 4:08pm
We had the same issue with bellnet.ca domain - a legitimate email bounced back twice, with SFDC relevance being 11 and 25 respectively for different IPs. I think SFI needs customizable filtering for such cases.



Print Page | Close Window