Content Filtering Issue

Problem reported by Joe Dellaragione - 8/10/2017 at 8:39 AM

Submitted

So I have been trying to cut down on SPAM so I have the following set:

In AntiSpam a SPAM message with a weight of 50 or over gets the subject tagged with [JUNK]. This is working fine.

Then in CONTENT FILTERING I have the following rules

1. Spam Probability Low or Above > Copy message to spam@......

2. Spam Probability High > Delete Message

The first one is working, but the second is not. Spam messages labeled [JUNK] are being delivered to mailboxes. What could be the issue? The reason I want to delete it here and not in antispam is I first want a copy sent to the spam@ address so I can make sure good messages are not being incorrectly filtered.

12 Replies

Reply to Thread

Joe Dellaragione Replied

8/10/2017 at 8:48 AM

I think I figured out my own question ...

Note: Content filters are executed in the order in which they appear in the list. Therefore, when a content filter gets triggered and performs an action on a message, no other content filtering is performed on that message. To change the order, click on the arrows next to a filter.

So I guess once the first message CC's a copy to SPAM it never moves on to the next rule which deletes it.

Employee Replied

8/10/2017 at 10:43 AM

Employee Post

Hi Joe. You are correct. This is by design, as you don't want a single email going through multiple content filter actions.

Joe Dellaragione Replied

8/10/2017 at 11:52 AM

Thanks. Let me ask a follow up question. Are the actions processed in any particular order? I have changed my content filtering to the following:

1. High Spam:
- Condition: Spam Probability = High
- Actions: Add text to subject, copy message to spam@, delete message

2. Low-Medium SPAM
- Conditions: Spam probability Low and above
- Action: Copy to spam@

For the first rule it appears to be just deleting the message. I have not gotten a single HIGH spam copied to that mailbox since creating this rule. The low, and above is appropriately forwarding the low and medium scores.

Employee Replied

8/10/2017 at 12:04 PM

Employee Post

Joe, I'll try scenario #1 here and let you know.

Employee Replied

8/10/2017 at 12:18 PM

Employee Post

Joe, in your delivery logs, does it show that the message is being deleted by the content filter, or by your antispam filtering?

Joe Dellaragione Replied

8/10/2017 at 12:26 PM

I've never looked at the logs I will take a look now but I did turn off SMTP deletion so the only thing deleting should be content filtering.

Joe Dellaragione Replied

8/10/2017 at 12:48 PM

Here we go: [2017.08.10] 11:52:53 [52042] Delivery for contact@qq.com to **** has completed (Deleted) Filter: High SPAM Rule

Joe Dellaragione Replied

8/10/2017 at 12:50 PM

But thats the only listing for that email. Nothing about copying to the other mailbox or changing the subject.

Employee Replied

8/10/2017 at 12:56 PM

Employee Post

Hi Joe. That means it was indeed deleted by the Content Filter. Let me test this here.

Joe Dellaragione Replied

8/10/2017 at 1:07 PM

OK this actually makes sense if the end result is delete it doesn't matter where it copies to first. So perhaps my rule should only be redirect ? Basically what I want is for the user to not get the email but the special mailbox I set up to get it just for a few weeks so I can make sure nothing important as being filtered Would be redirected option accomplish that?

Employee Replied

8/10/2017 at 3:03 PM

Employee Post

Joe, the copy action isn't working when a delete action follows right after it. I'll get this over to be fixed.

Joe Dellaragione Replied

8/10/2017 at 3:18 PM

I think if I switch it to redirect it would bypass the original mailbox and move it to the spam box, correct ?

Back to Community Threads

Please leave this box unchecked

12 Replies

Reply to Thread

Tags

Related Knowledge Base Articles