RE: Spam getting thru
|
Logged in as: Guest
|
|
Users viewing this topic:
none
|
|
Login  | |
|
RE: Spam getting thru - 12.Mar.2008 9:08:31 AM
|
|
|
bljohnson
Posts: 4
Joined: 28.Jan.2008
Status: offline
|
I'd like to also add myself to as a customer who is receiving tons of spam that's getting past GFI. Here's a perfect example.
Outlook Junk E-mail folder: 1841 spam emails
GFI Bayesian: 22
DNSBlacklist: 82
Header: 0
Keyword: 0
PURBL: 6
SURBL: 37
Why would my outlook filter catch 1841 emails and GFI only catch a total of 147? I cleared these out at the same time so these numbers should be for the same time period. We've also been adding spam to the Bayesian filter on-and-off for over a year.
The biggest problem is we're a Blackberry shop so each one of those 1841 emails that Outlook catches goes to the Blackberry prior to being filtered, which is the main reason why we purchased GFI.
< Message edited by bljohnson -- 12.Mar.2008 9:10:09 AM >
|
|
|
|
|
RE: Spam getting thru - 12.Mar.2008 1:11:30 PM
|
|
|
tuckotter
Posts: 10
Joined: 23.May2007
Status: offline
|
One other thing I should add about my previous post is that I originally had the Bayesian Analysis Actions set to Delete but then from one week to the next a newsletter from someone last week might be rejected this week because it contained text that made it appear to be SPAM, according to the Bayesian filter. I had to change the Action setting to just Tag the mail with SPAM. So now I'm back to where I started with no clear way to get rid of the SPAM!
_____________________________
Tim
|
|
|
|
|
RE: Spam getting thru - 12.Mar.2008 1:19:46 PM
|
|
|
nhbill
Posts: 126
Joined: 21.Mar.2006
Status: offline
|
I get alot of these crap after training bayseain and also putting it into keywords module.
Limited time only,USD 999 for free
any player will enjoy their experiences at this classical southern casino..
Play today at Online Casino.
http://www.gamblinsonlinecasinoep. com. cn
|
|
|
|
|
RE: Spam getting thru - 13.Mar.2008 7:39:14 AM
|
|
|
pmcneill
Posts: 149
Joined: 18.May2005
Status: offline
|
Ya, I thought this might be slowing down, but for my 600 users I'm now getting 50+ a day dumped into the This is Spam Email public folder, and I'm guessing there is probably 2-3X as many that people are just deleting. It's getting worse rather than better. I've dumped a few hundred in over the past week to try and train the Bayesian, but it's not slowing down.
|
|
|
|
|
RE: Spam getting thru - 13.Mar.2008 8:22:15 AM
|
|
|
Nicks
Posts: 2772
Joined: 17.Mar.2003
Status: offline
|
Hi all,
One mis-configuration we encounter often is when your domain, or email addresses from your domain are placed in the whitelist. There may be specific situations where this may be desirable, but generally, this should not be done.
As mentioned in a previous post from Jan, we do recommend that you enable at least 2 DNSBlacklists. Monitor the reports, and ensure that these are blocking a good amount of spam emails. In general, DNSBlacklists may block more than 50 % of spam emails if configured properly. A good article on how DNS Blacklists work in GFI MailEssentials can be found at http://kbase.gfi.com/showarticle.asp?id=KBID003273
Ensure also that the Perimeter servers are configured correctly. Check the following knowledgebase article which has been published recently on this topic:
http://kbase.gfi.com/showarticle.asp?id=KBID003296
http://kbase.gfi.com/showarticle.asp?id=KBID003277
_____________________________
Nicholas Sciberras
GFI Software
Blog-Twitter-YouTube-Facebook
|
|
|
|
|
RE: Spam getting thru - 13.Mar.2008 9:17:07 AM
|
|
|
pmcneill
Posts: 149
Joined: 18.May2005
Status: offline
|
Hi Nick,
We've looked at all of that, and are not finding the solution to our issue there. Without having made any modifications to our system we've seen a huge increase in the amount of SPAM GFI is missing over the past 2-3 weeks, and there seem to be several other people here having the same sudden increase in unfiltered SPAM. I have a lot of users indicating they went from almost no SPAM in their Inbox to 5-10 messages a day slipping in.
I've been hoping the Bayesian would start grabbing all of these, but it doesn't seem to be happening. Should I submit a case?
|
|
|
|
|
RE: Spam getting thru - 13.Mar.2008 9:56:37 AM
|
|
|
nhbill
Posts: 126
Joined: 21.Mar.2006
Status: offline
|
Geesh my users are spoiled! ;-)
quote:
ORIGINAL: pmcneill
Hi Nick,
We've looked at all of that, and are not finding the solution to our issue there. Without having made any modifications to our system we've seen a huge increase in the amount of SPAM GFI is missing over the past 2-3 weeks, and there seem to be several other people here having the same sudden increase in unfiltered SPAM. I have a lot of users indicating they went from almost no SPAM in their Inbox to 5-10 messages a day slipping in.
I've been hoping the Bayesian would start grabbing all of these, but it doesn't seem to be happening. Should I submit a case?
|
|
|
|
|
RE: Spam getting thru - 13.Mar.2008 10:07:20 AM
|
|
|
dialexia
Posts: 59
Joined: 21.Dec.2005
Status: offline
|
Sorry to join this parade GFI team, but I too am having problems this week with spam getting through.
|
|
|
|
|
RE: Spam getting thru - 13.Mar.2008 10:15:32 AM
|
|
|
bljohnson
Posts: 4
Joined: 28.Jan.2008
Status: offline
|
quote:
ORIGINAL: pmcneill
I have a lot of users indicating they went from almost no SPAM in their Inbox to 5-10 messages a day slipping in.
Wish thats all my users were getting. Since I posted in this thread initially, about 24 hours ago, I've gotten 42 spam emails. Of those, 35 were filtered by Outlook (passed right through GFI), 1 by the GFI Bayesian filter, and 6 by the DNSBlackList.
quote:
ORIGINAL: Nicks
As mentioned in a previous post from Jan, we do recommend that you enable at least 2 DNSBlacklists. Monitor the reports, and ensure that these are blocking a good amount of spam emails. In general, DNSBlacklists may block more than 50 % of spam emails if configured properly.
I have 4 blacklists enabled - but spam is still flying right through.
|
|
|
|
|
RE: Spam getting thru - 13.Mar.2008 11:15:58 AM
|
|
|
mtheory101
Posts: 1
Joined: 13.Mar.2008
Status: offline
|
We are experiencing the same issue. We tried to call GFI tech support and are getting incredibly long hold times. Also not getting any response to email support requests. Is this happening to every GFI ME customer?
We're also getting a message when starting GFI Admin program that our license has expired even though it's completely valid. Is anyone else experiencing that? GFI is not blocking any spam at all.
We need resolution on this immediately. We are being completely inundated with spam.
Duke Witchel
|
|
|
|
|
RE: Spam getting thru - 13.Mar.2008 11:31:59 AM
|
|
|
pmcneill
Posts: 149
Joined: 18.May2005
Status: offline
|
quote:
ORIGINAL: mtheory101
We are experiencing the same issue. We tried to call GFI tech support and are getting incredibly long hold times. Also not getting any response to email support requests. Is this happening to every GFI ME customer?
We're also getting a message when starting GFI Admin program that our license has expired even though it's completely valid. Is anyone else experiencing that? GFI is not blocking any spam at all.
We need resolution on this immediately. We are being completely inundated with spam.
Duke Witchel
That sounds like a very different issue than the one most people in this thread are complaining of. In the past 7 days MailEssentials has filtered around 273,000 SPAM emails for us (about 93% of our inbound email) so its definitely working. However, it's the few hundred a day that it's missing that my users are complaining of. The product generally doesn't miss much, so once it starts missing an unusual amount like this, people start to notice.
If it's not stopping ANYTHING for you, you've got a different issue. That licensing message doesn't sound good.
|
|
|
|
|
RE: Spam getting thru - 13.Mar.2008 11:47:08 AM
|
|
|
peter
Posts: 2
Joined: 13.Mar.2008
Status: offline
|
I've had the same issues, but seem to have solved this morning. I had 100+ obvious emails getting past keyword filters, etc for our heaviest users. the issue was with our whitelist. I first disabled the "check emails against Auto Whitelist" and "Populate Auto Whitelist automatically" functions because spammer email addresses were added from our out of office replies. Then i changed the filter dropdown to "show manaully entered" and exported the manual whitelist to and xml file and made a backup copy. I then examined the manual list in an editor for odd entries (ie. any addresses with our company domain, *@*.com, any addresses that when i checked via google or alexa were just hosting domains, etc.), deleted them, and saved the file. I then highlighted the all addresses in the "Email Address/Doman" window in gfi and removed. I then imported the xml file i just edited and clicked apply. Now i've been problem free. Previous to this, i also installed the latest build, made sure all my incomming domains were being filtered, checked that all modules were on and configured correctly: keyword filters so that they were no redundant entries and incorrect arguments, added entries relavant to new spam, and checked off match whole words, only US character sets accepted, etc. I also made sure were in the order that made the most sense for our company (custom blacklist, directory harvesting, dns blacklist at the top). I hope this helps.
|
|
|
|
|
RE: Spam getting thru - 13.Mar.2008 12:07:26 PM
|
|
|
pmcneill
Posts: 149
Joined: 18.May2005
Status: offline
|
Thanks for the tips. If you've disabled your auto-whitelist populating and checking you're going to have a worse problem, which is a bunch of false-positives. Not really an option here.
|
|
|
|
|
RE: Spam getting thru - 13.Mar.2008 12:18:44 PM
|
|
|
bljohnson
Posts: 4
Joined: 28.Jan.2008
Status: offline
|
quote:
ORIGINAL: pmcneill
Thanks for the tips. If you've disabled your auto-whitelist populating and checking you're going to have a worse problem, which is a bunch of false-positives. Not really an option here.
False positives are worse than spam getting through for us.
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|
Printable Version
