Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 3 subscribers
  • Views 3302 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Since some days too may Spams Mails are passing the UTM 9.4.08-4 as not deteced

dlohnier

Hello guys,

since some days a lot (5-20 a day) of really uglly and dangerous Spam Mails are passing the Anti-Spam pretection of the UTM  9.4.08-4.

I am using 6 RBLs and the default ones.
I have advanced anti-spam active:
Reject invalid HELO / missing RDNS
    Use greylisting
    Perform SPF check

What happend to the Sophos UTM anti-spam filtering?
Are the spammers using a new technology Sophos is not aware?

Any idea to improve?

Regards, Reinhold



This thread was automatically locked due to age.
Parents
  • 0

    Hi, Reinhold, and welcome to the UTM Community!

    I'm not seeing that.  I wonder if you don't have some Exception or whitelist entry that's letting so many through.  Pick several and check the SMTP Log file to see whether they were passed for some other reason than fooling the spam filter.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0

    Hi, Reinhold, and welcome to the UTM Community!

    I'm not seeing that.  I wonder if you don't have some Exception or whitelist entry that's letting so many through.  Pick several and check the SMTP Log file to see whether they were passed for some other reason than fooling the spam filter.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • 0 in reply to BAlfson

    Good Morning,

    i can confirm that, but i thought it has something to do with our recently migrated UTM since it was completely fresh configured.

    Its nothing dangerous what gets through but such annoying stuff like advertising.

    I just wanted to create a post about it before i saw this one

Unfiltered HTML