Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Spam still pass because of multiple RCPT TO
  FAQ FAQ  Forum Search   Register Register  Login Login

Spam still pass because of multiple RCPT TO

 Post Reply Post Reply
Author
Shade View Drop Down
Groupie
Groupie
Avatar

Joined: 20 April 2006
Location: France
Status: Offline
Points: 42
Post Options Post Options   Thanks (0) Thanks(0)   Quote Shade Quote  Post ReplyReply Direct Link To This Post Topic: Spam still pass because of multiple RCPT TO
    Posted: 11 January 2009 at 4:42am
Dear ALL,

I'm a using spamfilter ISP v 4.1.2.796, and I have the following problem, I'll try to explain :

I have spams sended to direction@some domain on our plateform witch still pass, even if the spam contain keywords activated by all RCPT TO domains except the first one (multiple RCPT TO on the same thread, probably CC our CCI).

The first RCPT TO was whitelisted : in logs : bypassed all rules for: direction@xxxxx from xxx@xxx ( Whitelisted EmailTO).
On the same thread (same number of thread in logs), the connection has other RCPT TO other direction@some other domain on our plateform without the whitelisted EmailTo (because EmailTo is different), and with keywords filter activated, that normaly match with the body of spam. On all other RCPT TO than the first one the first rule ( Whitelisted EmailTO) is applied. So all others emails like direction@domains received the spam... It's a problem, because we have more and more spam of this type, but we can't, for some clients, disable some whitelisted EmailTo functions... Is there a way to fix this ?

Thank you,
Best regards.


Edited by Shade - 13 January 2009 at 3:17am
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 16 January 2009 at 7:41pm
When SpamFilter Enterprise processes the keywords in either the blacklist or the whitelist keyword files, and the email has multiple recipients belonging to different domains, SpamFilter is currently only able to check the keyword list contained in the *first* domain. The keywords contained in the other domains are not being checked. This is a limitation that hopefully will be addressed in a future release of SpamFilter.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.063 seconds.