Detected spam signature in embedded image
Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6919
Printed Date: 28 December 2024 at 6:39pm
Topic: Detected spam signature in embedded image
Posted By: JamesW
Subject: Detected spam signature in embedded image
Date Posted: 23 February 2011 at 10:00am
|
One of my VP's had an email from his wife spam filtered. When I looked into the matter, it turns out that the embedded image was being detected as spam. I received error 557: Detected spam signature in embedded image I tried saving the image and sending it with a different name, changing the format from png to jpg, and tried editing the image to see if that made a difference. It's not a large image and is not anything even remotely "controversial" I really would like to know what caused this to happen and how I can prevent it from happening in the future. If need be, I can send the image. Thanks - James |
Replies:
Posted By: LogSat
Date Posted: 23 February 2011 at 12:03pm
|
James, The image filter performs an statistical analysis on the image to see if it "looks like" other images that are present in other spam emails. Statistics unfortunately is not always 100% accurate, so this filter, like some other, may occasionally stop valid images. You can disable it completely, or can try to lower its threshold to be less sensitive. The GUI setting for is the "Image filter threshold", which you can find by seeing this screenshot:
http://www.logsat.com/sfi-spam-filter-screenshots/sfi-filtering-options.asp - http://www.logsat.com/sfi-spam-filter-screenshots/sfi-filtering-options.asp In addition, the following settings can be changed in the SpamFilter.ini file to further tweak this filter (you do not need to restart SpamFilter after making the changes, they will be re-imported automatically within 60 seconds). The ones that can be tweaked most safely to adjust to the customers signatures are the ones in bold below that tell SpamFilter which image sizes to ignore. Any image that is smaller than the one indicated below will not be scanned. You could try increasing those values to 400-500 to lower the number of false positives as well. ;Image filter threshold. Higher values indicate a more aggressive filter. 0 disables the filter. Min=0, Max=15 SpamImageThreshold=10 ;Image filter color sensitivity. Used internally to detect color shades SpamImageColorSensitivity=20 ;Images embedded in email's html having a width smaller than this will not be scanned. Useful to bypass signatures and logos SpamImageMinWidth=300 ;Images embedded in email's html having a height smaller than this will not be scanned. Useful to bypass signatures and logos SpamImageMinHeight=300 ;Determines the number of points that will be scanned in a image to process it for spam SpamImageSamplingPoints=200 ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: JamesW
Date Posted: 23 February 2011 at 12:29pm
|
I went ahead and adjusted the settings in spamfilter.ini, and did additional testing. I am happy to report that he can now send that email without it being filtered. I am going to keep an eye on things to make sure we do not get too much additional spam from the setting change, but I am not anticipating it rising enough to warrant a change back Thanks for the help |
Posted By: yapadu
Date Posted: 23 February 2011 at 7:53pm
It is always a problem when the big guys have an issue, they have the biggest bite. I would suggest you also whitelist his wife's email address. ------------- -------------------------------------------------------------- I am a user of SF, not an employee. Use any advice offered at your own risk. |
JamesW wrote: