Print Page | Close Window

New install - lots of spam getting through

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6682
Printed Date: 22 October 2017 at 11:42am


Topic: New install - lots of spam getting through
Posted By: hartsockt
Subject: New install - lots of spam getting through
Date Posted: 05 June 2009 at 7:15pm
I've just recently installed Spam Filter ISP.  Where can I find some suggestions regarding configuration to get me started.  With the default settings, over 1/2 of all messages are still getting through (most of which are spam).

Any advice would be helpful.

Thanks



Replies:
Posted By: LogSat
Date Posted: 06 June 2009 at 4:18pm
hartsockt,

SpamFilter should work with very effective results out-of-the-box without any special/additional settings.

The most common causes for which excessive spam is received are usually one or more of the following:

1. SpamFilter is not the first device on your network that processes incoming SMTP traffic. As many of the filters used by SpamFilter use the IP address of the remote server to detect spam, it is imperative that SpamFilter "sees" the original internet IP address of the remote server when an incoming SMTP connection is established.

2. The DNS server(s) that is(are) configured in SpamFilter are not functioning (they are offline, incorrect, or result in large amounts of timeouts)

3. Spam emails are delivered from spammers directly to other SMTP servers that you may have available and listening for SMTP traffic on your network. For example, spammers are known to send spam to all DNS MX and A records listed for a domain. If running multiple MX records, admins need to ensure that all the servers listed by the MX records are running some kind of antispam software.

If none of these issues apply to you, if you can provide us with SpamFilter's activity logfile for one day, along with your SpamFilter.ini file and a copy of the \SpamFilter\Domains subdirectory. If any of your files containing the various whitelist/blacklist are located outside that directory structure, please include those as well. This allows us to debug your log to ensure all the filters are working correctly and to review your settings offline.

f the zipped file is over 5MB in size, please try to upload the file to our ftp server, for which I'll provide you with login info via a PM.

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP



Print Page | Close Window