Hi Kärsten,
Thanks for you message -
for daily work I'm providing a lot of IT and PC support, including some
network admin tasks.
But about messaging I don't know much, as everyone here obviously has
understood.
The problem with false spam alerts has been since times and now finally
friends from law office triggered me to check why "very important" but
simple text messages get false badge of spam and finally get lost or are
found 2 days later from recycle bin...
I have in my Outlook inbox a lot of such sad samples. And even worse, I
don't have in my Inbox xxx subfolder, where I manually drag and drop real
spam, not too may ones marked as spam.
As a result of this statistics, my suggestion to customer has been not to
use any local spam filtering rules, as anyway later all post must be
manually checked. I'd give an approximatate of 30% is marked correctly as
spam and approx 20% of normal mail gets false spam status.
The mail usually isn't blocked but subject line reads ***spam***, but
sometimes mail has got lost as well.
So to get some enlightment, I have pasted here some headers with SA results
as provided by Outlook.
Headers I have pasted here are usually the ones I have received. But some
are also from sent to me for investigation as attachment, but means also a
received messages.
The ISP is a local prevailing Telecom and there isn't much of choice I'm
afraid.
The help you can provide is to understand what's wrong with filtering and
then I could compare different ISP mail service and make suggestions. I did
some googling but couldn't find even any basic list of SA abbr.
explanations.
>From your replies I try to figure out the essential and provide more precise
samples in future.
PS. The irony is, that Robert of this group clicked to Reply button and
messages were sent to my Yahoo.com mail account, where these were marked and
moved to spam folder.
Thanks,
Roberta
Karsten Bräckelmann-2 wrote:
>
> On Wed, 2009-01-28 at 11:31 -0800, Roberta wrote:
>> Thanks for all your replies. That is exactly, what I wanted to know.
>> "Locally global" ISP's don't have much of competition and can afford
>> themselves providing a bad service and no customer support at all.
>>
>> I would like to be able to undersand spam filtering results from arriving
>> email headers but abbreviations are difficult to interpret.
>
> Roberta, one quite important question went unanswered in your last
> thread, and still isn't clear from this. How exactly do you get these
> headers you pasted? Are you *sending* or *receiving* the original
> message? Are we talking the network (read cable) provider or a mail
> hosting ISP? Does the mail get blocked? What about those headers then...
>
> We can try explain the SA tests triggered, if google doesn't help much.
> However, understanding who sent the mail and why exactly you are getting
> these would be useful. Also, since you are not in control of the mail
> processing chain, we really merely can explain it. We can't help you fix
> it.
>
>> It appears, that SA should require from users (local admins) passing a
>> proper course, else SA is misused a lot.
>
> According to your samples -- yes. We've pointed out quite some changes
> to the default configuration and scores. Most (all?) of these would not
> have been blocked by a vanilla SA. That's the result of the ISP messing
> with the scores.
>
>
> --
> char
> *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
> main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8?
> c<<=1:
> (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0;
> }}}
>
>
>
--
View this message in context:
http://www.nabble.com/False-spam-alarm-tp21704844p21736149.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
