What filter is adding this specific prefix "[Spam]"?

Question asked by Lawrence M - 5/1/2015 at 11:46 AM

Answered

A new (extra) prefix, "[Spam]" started appearing in some email subject lines. This is in addition to the spam filter prefixes explicitly configured by us ( Spam-Low, Spam-Med, Spam-High). It is being inserted in the subject before the expected prefixes are and started showing up a few months ago. There is no explicit filter that I can find that is set to add that extra prefix. It seems to be independently weighted from the expected prefixes because it will show up alone or in addition to the expected prefixes. Sometimes the expected prefixes will appear without the extra (new) one.

Sample Subject:" Spam-Low: [Spam] :Special upgrade price...."

Running SM 12.3 w/ Cyren AntiSpam

Thanks.

5 Replies

Reply to Thread

Employee Replied

5/11/2015 at 1:31 PM

Employee Post

Hello Lawrence,

Thanks for the information on the this issue. Generally you would have an additional Content filter configured to detect the weighed emails. Can you please provide more details whether this is observed for all users on a domain or just a specific account. Do you have any other Spam or Anti-Virus application that may be executed outside of SmarterMail ?

Please send us a copy of the Delivery logs or SMTP of the next occurrence and we can review. Please open a Support Ticket if you would like for us to review the configurations on the account.

Thanks.

Lawrence M Replied

5/13/2015 at 4:42 PM

Hello Joseph,

I checked the content filters for any that would take that action and found none. This is happening for multiple users and multiple domains. We use Trend ServerProtect for our in-house anti-virus but that doesn't have the ability to modify the subject line (or at least it never has before and there have been no changes to that app/config). I'm reviewing the Trend setup again in due diligence. I'll also send the requested logs. Do I just post them here (scrubbed of personal/IP info)?

Thank you,

Lawrence