This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Modifying the weight of spam rules.

Recently, I put in place a Premessage rule which refuses accept messages whose spam probability is over 90% *if* the user forwards his email to another site.  Being able to reject these messages at smtp time has cut down the backscatter quite a bit.  But  I've noticed that messages from a group (Yyom-jobs) are getting a high spam score because of, for example, the SXL_FREEWEB spam test. I hate to think that messages containing employment possibilities may be going astray so I'm wondering how to deal with this situation, given that the Manager's manual warns us to be careful about modifying the weight of, or the addition of, our own spam rules.

thanks,

bob

:2353


This thread was automatically locked due to age.
  • Hey Bob,

    The best way is to submit this to not-spam@sophos.com as per the following article:

    http://www.sophos.com/support/knowledgebase/article/23113.html

    It would be good to keep a copy of the message on an edge server, and re-scan it 24 hours after your submission.

    $ pmx-spam scan -v <Message.txt>

    If it still scores high, and you believe this to be a legitimate source, contact support to open a case with SophosLabs.

    Cheers.

    :2401
  • Thanks for the reply.  I guess what you suggested is what I would normally do, but because my rule rejects the spam at SMTP time (and doesn't quarantine it) I don't have a copy to send to not-spam@sophos.com.  I'll take another look at  modifying my rules and see if I can snare an example of the messages that are causing the problem.

    thanks,

    bob

    :2402