Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 16 replies
  • Subscribers 1 subscriber
  • Views 10622 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Updated from Astaro to Sophos UTM 9; Antispam performance is dismal

gjkoz
I upgraded from Astaro 8 to Sophos UTM 9, I'm using pretty much the same mail protection settings, but my spam messages per day went from 3 total to a few hundred. I'm drowning in annoying spam mail. I don't see a setting anywhere to change the "Spam Confidence Level", the only settings I see are to Quarantine Spam, and Blackhole "Confirmed Spam"; however this new version seems to be blocking a whole lot less than it used to.

Any advice?


This thread was automatically locked due to age.
Parents
  • 0
    2013:06:23-14:33:16 my.firewall exim-in[2358]: 2013-06-23 14:33:16 1Uqp6B-0000c2-1S ctasd reports 'Unknown' RefID:str=0001.0A090205.51C73FB8.0002,ss=1,re=0.00 0,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0

    This doesn't look like any spams reported to CommTouch.

    In addition, it seems that the email was delivered in spite of greylisting.  The other anti-spam tests also must have passed as did RDNS/HELO.  The IP of the mail server is not on any of the RBLs used by Anti-Spam.  This looks to me like a non-spam and that you don't have the same problem that the OP in this thread had.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    2013:06:23-14:33:16 my.firewall exim-in[2358]: 2013-06-23 14:33:16 1Uqp6B-0000c2-1S ctasd reports 'Unknown' RefID:str=0001.0A090205.51C73FB8.0002,ss=1,re=0.00 0,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0

    This doesn't look like any spams reported to CommTouch.

    In addition, it seems that the email was delivered in spite of greylisting.  The other anti-spam tests also must have passed as did RDNS/HELO.  The IP of the mail server is not on any of the RBLs used by Anti-Spam.  This looks to me like a non-spam and that you don't have the same problem that the OP in this thread had.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML