(Delivered) Filter: Spam (Weight: 39) - what does that exactly mean?

Question asked by Jon Eastwood - 1/7/2015 at 7:34 AM

Unanswered

Client is asking why they still get spam for stuff that is clearly spam, especially when the log record for such email looks as belowand i am now running commtouch also:

Delivery for xxxxxx to xxxxxxx has completed (Delivered) Filter: Spam (Weight: 39)

Spam settings are as follows:

Low: 15 - Prefix subject

Medium: 20 - Move to Junk

High: 50 - Delete

So when it says Delivered) Filter: Spam (Weight: 39) - surely that should have gone to junk yet the client go it in their inbox?

Any ideas please

12 Replies

Reply to Thread

Steve Reid Replied

1/7/2015 at 7:43 AM

Action are configurable within spam settings. You decide what happens based on what weight. Security > Antispam Administration > Filtering

Jon Eastwood Replied

1/7/2015 at 9:15 AM

Cheers Steve,

I understand that but I was unsure as to what actual action 'Filter: Spam' refers to low,medium, or high:

Plus my settings mean it should never have been delivered

Steve Reid Replied

1/7/2015 at 9:53 AM

According to your screenshot it should have gone to the junk e-mail folder...

Check to see if the user has any content filter that override that behaviour?

Jon Eastwood Replied

1/7/2015 at 10:52 AM

the only filter they have is a zip filter, but that would have shown up in my log file records would it not?

Steve Reid Replied

1/7/2015 at 10:58 AM

Yeah it should... not sure how this could happen. Maybe it was moved by their client software?

Jon Eastwood Replied

1/7/2015 at 11:47 AM

but as i said it appeared in the clients inbox and the log states it was delivered, maybe a SM staff may see this :-)

Steve Reid Replied

1/7/2015 at 12:12 PM

When an email is directed to the junk email folder it still says delivered.

Jon Eastwood Replied

1/7/2015 at 1:53 PM

well the client has assured me this email was delivered into the inbox

Employee Replied

1/8/2015 at 1:04 PM

Employee Post

Hi all. A couple of things could be happening here.

1. The sending domain is specified as a trusted sender at either the system/domain/user level.

2. Users are allowed to override default spam settings in Security >> Antispam Admin >> Options tab.

You are correct that the above message should've been sent to the junk folder. The reason it wasn't was probably due to one of these.

Jon Eastwood Replied

1/8/2015 at 1:25 PM

Hi Rod, check user settings as well as domain settings and both are set to system settings and not override - if it was a trusted sender would that not be listed in the log file record?

Jon Eastwood Replied

1/8/2015 at 1:29 PM

Delivery Log entries [2015.01.08] 14:27:19 [95222] Delivery started for xxxx@xxxxx at 14:27:19 [2015.01.08] 14:27:22 [95222] Spam check results: [_SPF: None], [* BARRACUDA - BRBL: passed], [* CBL - ABUSE SEAT: passed], [* GBUDB: passed], [* HOSTKARMA - BLACKLIST: passed], [* HOSTKARMA - BROWNLIST: passed], [* HOSTKARMA - NO BLACKLIST: passed], [* HOSTKARMA - WHITELIST: passed], [* MAILSPIKE BL: passed], [* MAILSPIKE Z: passed], [* SORBS - ABUSE: passed], [* SORBS - DYNAMIC IP: passed], [* SORBS - PROXY: passed], [* SORBS - SOCKS: passed], [* SORBS SMTP: passed], [* SPAMCANNIBAL: passed], [* SPAMHAUS - CBL: passed], [* SPAMHAUS - CSS: passed], [* SPAMHAUS - PBL: passed], [* SPAMHAUS - PBL2: passed], [* SPAMHAUS - SBL: passed], [* UCEPROTECT LEVEL 1: passed], [* UCEPROTECT LEVEL 2: passed], [* UCEPROTECT LEVEL 3: passed], [* VIRUS RBL - MSRBL: passed], [_REVERSEDNSLOOKUP: passed], [_COMMTOUCH: 30,Confirmed], [_INTERNALSPAMASSASSIN: 0:0], [_DK: None], [_DKIM: None], [* SURBL - ABUSE BUSTER: passed], [* SURBL - JWSPAMSPY: passed], [* SURBL - MALWARE: passed], [* SURBL - PHISHING: passed], [* SURBL - SPAMCOP WEB: passed], [* URIBL BLACK: passed], [* URIBL GREY: passed], [* URIBL MULTI: passed], [* URIBL RED: passed] [2015.01.08] 14:27:25 [95222] Starting local delivery to xxxx@xxxx.co.uk [2015.01.08] 14:27:25 [95222] Delivery for xxxx@xxxx to xxxx@xxxx.co.uk has completed (Delivered) Filter: Spam (Weight: 30) [2015.01.08] 14:27:25 [95222] End delivery to xxxx@xxxx.co.uk [2015.01.08] 14:27:25 [95222] Delivery finished for xxx@xxxx at 14:27:25 [id:14462695222]

Employee Replied

1/8/2015 at 2:01 PM

Employee Post

Hi Jon. Something is definitely not right with that delivery log. It should have been moved to spam simply for the Cyren score. I would upgrade if you're not on SmarterMail 13. If you are, then I'd recommend a support ticket, which from what I see in all likelyhood will be refunded back to you as a bug.

Back to Community Threads

Please leave this box unchecked

12 Replies

Reply to Thread

Tags

Related Knowledge Base Articles