Print Page | Close Window

Spam getting through

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5114
Printed Date: 28 April 2025 at 6:05am


Topic: Spam getting through
Posted By: cmrbds
Subject: Spam getting through
Date Posted: 29 March 2005 at 12:10pm

We have recently began experiencing problems where mail that should be caught in the Spamfilter quarantine (because it's SPAM) isn't being caught for some reason and it's being passed on to the users. Several users are complaining about this issue. I was forwarded a message that got through and checked the log files to find yes indeed it did get through without any hold up (Below is the detail from the log). Can you explain to me why this got through and/or if there is anything I can do to prevent this from happening in the future.

We've recently upgraded to version 2.1.2.402 and since the upgrade it seems like more users are complaining about this problem. Could the upgrade/version have anything to do with it?

Log Example

03/28/05 18:36:26:060 -- (2596) - SPF analysis for lycos.com done: - none
03/28/05 18:36:26:060 -- (2596) - Warning: Error during SPF record check - TimedOut
03/28/05 18:36:26:060 -- (2596) Mail from: mailto:xlzjtqytemtq@lycos.com - xlzjtqytemtq@lycos.com
03/28/05 18:36:26:576 -- (2596) - MAPS search done...
03/28/05 18:36:26:576 -- (2596) RCPT TO: mailto:cjohn@pepsilane.com - cjohn@pepsilane.com accepted
03/28/05 18:36:27:998 -- (2596) Mail from: mailto:xlzjtqytemtq@lycos.com - xlzjtqytemtq@lycos.com
03/28/05 18:36:27:998 -- (2596) RCPT TO: mailto:koleary@pepsilane.com - koleary@pepsilane.com accepted
03/28/05 18:36:29:091 -- (2596) Mail from: mailto:xlzjtqytemtq@lycos.com - xlzjtqytemtq@lycos.com
03/28/05 18:36:29:091 -- (2596) RCPT TO: mailto:yweeres@pepsilane.com - yweeres@pepsilane.com accepted
03/28/05 18:36:30:857 -- (2596) EMail from mailto:xlzjtqytemtq@lycos.com - xlzjtqytemtq@lycos.com to mailto:cjohn@pepsilane.com - cjohn@pepsilane.com , mailto:koleary@pepsilane.com - koleary@pepsilane.com , mailto:yweeres@pepsilane.com - yweeres@pepsilane.com passes Bayesian filter - 0% spam  (16ms)
03/28/05 18:36:30:873 -- (2596) EMail from mailto:xlzjtqytemtq@lycos.com - xlzjtqytemtq@lycos.com to mailto:cjohn@pepsilane.com - cjohn@pepsilane.com , mailto:koleary@pepsilane.com - koleary@pepsilane.com , mailto:yweeres@pepsilane.com - yweeres@pepsilane.com was queued. Size: 2 KB, 2048 bytes
03/28/05 18:36:30:873 -- (2040) Sending email from mailto:xlzjtqytemtq@lycos.com - xlzjtqytemtq@lycos.com to mailto:cjohn@pepsilane.com - cjohn@pepsilane.com , mailto:koleary@pepsilane.com - koleary@pepsilane.com , mailto:yweeres@pepsilane.com - yweeres@pepsilane.com
03/28/05 18:36:30:919 -- (484) Time to add Msg to Bayes corpus:0
03/28/05 18:36:31:013 -- (2040) EMail from mailto:xlzjtqytemtq@lycos.com - xlzjtqytemtq@lycos.com to mailto:cjohn@pepsilane.com - cjohn@pepsilane.com , mailto:koleary@pepsilane.com - koleary@pepsilane.com , mailto:yweeres@pepsilane.com - yweeres@pepsilane.com   was forwarded to 192.168.1.2:25
03/28/05 18:36:31:529 -- (2596) Disconnect




Replies:
Posted By: LogSat
Date Posted: 29 March 2005 at 6:14pm
Occasionally spam email will slip by SpamFilter, that is normal as no filter is 100% effective. How much depends on your SpamFilter settings. There are several filters that SpamFilter uses, and many of them can be tweaked by users. The one thing to check is your DNS server(s), as in this log snippet we see a TimeOut during the SPF filter test - this could possibly be caused by your DNS server timing out. Without a good DNS server, SpamFilter will not be able to perform many of its tests.

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP



Print Page | Close Window