Content Filtering
Problem reported by Rick Ryan - 4/6/2026 at 2:42 PM
Submitted
I'm on build 9560.  I host multiple domains, primarily for family and family owned businesses.  I do not have a staff to perform detailed analysis.  I tend to try to use content filtering to get through whatever the latest SPAM/Virus/extortion fad is.  It seems to me that the content filtering is not working.

I have multiple rules setup, some looking at headers, some at subjects, some at the message as a whole.  Earlier today I added about two dozen new conditions to existing rules, none using wildcards.  Throughout the afternoon I continue to receive messages that match the phrases I added to "delete message" rules.

What am I doing wrong, or are the content filtering rules not working right for others?
terry fairbrother Replied
Use Routing Rules rather than Content Filtering rules. I started out with CF rules and found them a little hit and miss but RR has been better. Personally I have around 20 rules, ranging from single words to language / IT / website / numbers etc and all set to quarantine the message. I have found that I need to quote everything - "targetword" as I was getting false positives as the targetword was in the middle of another word.

Where I get a false positive, I look at the routing rules log, look for the group then go through the email to determine the cause. I have requested a feature where the 'word' is also shown in the log to help pinpoint the cause.

I have also stopped using wildcards as I found them to cause more issues too

I also now use 'Subject or Body' as the main filtering. Header has to be exact and Raw seems to ignore everything
Douglas Foster Replied
I wish an employee would post on this topic.  There is a lot of complexity to content filtering, since it is several different problems, depending whether you are searching text or html, and whether you are searching Ascii text or Unicode.

When searching for "bad stuff", which of these are matches:
  • Formatting tags in HTML:   bad<strong>stuff</strong>
  • Paragraph break in HTML:  bad<p>stuff
  • Line break in plain text:  bad\r\nstuff
  • Paragraph break in plain text:   bad\r\n\rn\stuff
And what if you want to search the HTML for a malicious tag, such as <script>

I have not seen a good description of how they deal with these issues, so it is hard to know how to explain unexpected results.
Brian Kropf Replied
I have noticed that if Bounce Message is included in the list of Actions, none of the other actions execute. I would like SmarterMail to change this behavior.  
1) Offer a method of executing multiple actions in a specific order. The first action gets executed before the second one, etc.
2) Execute ALL actions in the filter. In my case, I wish to bounce the message back to the sender based on specific conditions. BUT I also want a copy of the message in a "for review" folder in the event that the Administrator determines the email is legit. They can then copy the email to the intended recipient's Inbox. 
YS Tech Replied
@Rick Ryan 
I've just been through a ticket with SM and have gained a bit more knowledge on the way the spam filters and content filters are working.

The reason the content filters aren't working (for me) is more than likley because the spam filters are working better and if they trigger first, it won't look to the content filters to do anything as it's already been filtered.
I think i've seen this because my spam filters are actually working better now and placing everything in the spam folder instead of it getting to my content filters that removed the emails or placed them in specific folders.

So, 2 options really.
1) Leave the filtering to do its work and if they are all spam going into the spam folder, choose what you do with them with the main spam filters, whether it be delete or just move to spam.
2) Change your weight ranges so certain probablility of spams don't get moved into spam, then these emails will then go onto the domain level spam filters and if not picked up by them, then onto the content filters.

I'm going to have a play around with the weight ranges and see what happens and when it starts triggering the content filters.

Spam/Content filter order:
1) System Spam checks
2) Domain level Spam checks (if different)
3) Domain level Content Filters
4) User level Spam checks (if different)
5) User level Content Filters

Reply to Thread

Enter the verification text