Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 1 subscriber
  • Views 3364 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM blocking too much?

stealthmatt_01
Hi all,

My manager has asked if there is a away to set a score setting for spam emails? Exchange SBS 2011 has a antispam function and it can score spam and let it through based on the score you choose.

I don't see anywhere for the UTM to do this other than set a white list for the domain to allow the spam through...

for example Kogan is a big retail giant here in Australia and they send mass emails to users, same as ebay so we want to see this promotional material.

However, anything that is spam related is put in quarantine. (Good on sophos, but we actually don't want it as restrictive) even subscribed bulletins it quarantines


This thread was automatically locked due to age.
Parents
  • 0
    Matt, the CommTouch approach doesn't allow setting a score.  If you look at the SMTP log, you'll see that ctasd calculates a RefID and then checks a string like the following against the CommTouch database in the cloud:

    RefID:str=0001.0A090204.539925F0.007A:SCFSTAT19841637,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0


    If you're having non-spams quarantined, choose "Release and report as false positive" in Mail Manager or the User Portal.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    Matt, the CommTouch approach doesn't allow setting a score.  If you look at the SMTP log, you'll see that ctasd calculates a RefID and then checks a string like the following against the CommTouch database in the cloud:

    RefID:str=0001.0A090204.539925F0.007A:SCFSTAT19841637,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0


    If you're having non-spams quarantined, choose "Release and report as false positive" in Mail Manager or the User Portal.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML