Viagra ads get through, and yes, I have added it to the keyword checking
|
Logged in as: Guest
|
|
Users viewing this topic:
none
|
|
Login  | |
|
Viagra ads get through, and yes, I have added it to the... - 28.Apr.2008 4:42:58 PM
|
|
|
jbraly
Posts: 11
Joined: 25.Apr.2008
Status: offline
|
email comes in daily with subject:
Dear jbraly@stjweb.org April 85% 0FF
Very similar to the spams back in the day that had anywhere from 70% to 70% off in the subject.
Display name who it is from is "VIAGRA ® Official Site"
From address is my address (and no, my address is not in my whitelist.)
The GIF or JPEG that is the body is blocked, but this still comes through....
About this mailing:
You are receiving this e-mail because you subscribed to MSN Featured Offers. Microsoft respects your privacy. If you do not wish to receive this MSN Featured Offers e-mail, please click the "Unsubscribe" link below. This will not unsubscribe you from e-mail communications from third-party advertisers that may appear in MSN Feature Offers. This shall not constitute an offer by MSN. MSN shall not be responsible or liable for the advertisers' content nor any of the goods or service advertised. Prices and item availability subject to change without notice.
©2008 Microsoft | Unsubscribe | More Newsletters | Privacy
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052
I even added the phrase "MSN Featured Offers" to the keyword checking, yet it still comes through.
Ideas?
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 28.Apr.2008 7:44:46 PM
|
|
|
John Letourneau
Posts: 1089
Joined: 28.Apr.2008
From: Clayton, NC
Status: offline
|
jbraly,
In most cases where spam that contains keywords that are configured in GFI MailEssentials are still making it to user mailboxes we normally look towards the whitelist allowing the message in. Please take a few minutes and make sure that your email address and/or your entire domain is not on your whitelist. If these messages are not spoofed messages also make sure the domain they are coming from is not on your whitelist as well.
I did see that you said your address is not on the whitelist but before we get too far we really need to make sure that it wasn't missed or that your domain or the sending server domain is not present. If you have keywords configured and the message is still making it through GFI MailEssentials it is normally being pushed through due to the whitelist, this is why this step is crucial.
I would also advise you to go through http://kbase.gfi.com/showarticle.asp?id=KBID003256 to check your MailEssentials configuration.
_____________________________
Regards,
John Letourneau - Senior Technical Support Representative
GFI Software - www.gfi.com
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 28.Apr.2008 7:54:54 PM
|
|
|
jbraly
Posts: 11
Joined: 25.Apr.2008
Status: offline
|
*@stjweb.org is not on the whitelist.
jbraly@stjweb.org is not on the whitelist.
The only IP address on the IP whitelist is my own, which is odd, but I dont see how that can be the issue.
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 29.Apr.2008 6:17:54 AM
|
|
|
dev.softLD
Posts: 13
Joined: 17.Apr.2008
Status: offline
|
look at the keyword whitelist :)
i had a problem where some spam would get thru because they'd use a word that we had added to the keyword whitelist :)
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 29.Apr.2008 8:17:05 AM
|
|
|
jbraly
Posts: 11
Joined: 25.Apr.2008
Status: offline
|
well, I have STJ in the keyword whitelist.
Does GFI not distinguish between STJ and jbraly@stjweb.org?
I find that odd if so.
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 29.Apr.2008 9:13:07 AM
|
|
|
John Letourneau
Posts: 1089
Joined: 28.Apr.2008
From: Clayton, NC
Status: offline
|
jbraly,
In your Keyword Whitelist (Body) do you have "Match whole words only (words/phrases in subject/body)" checked? If not, that STJ entry could be the reason you are seeing these spam messages.
_____________________________
Regards,
John Letourneau - Senior Technical Support Representative
GFI Software - www.gfi.com
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 29.Apr.2008 9:14:46 AM
|
|
|
jbraly
Posts: 11
Joined: 25.Apr.2008
Status: offline
|
That was NOT checked... but STJ is not in the body whitelist. it is in the SUBJECT whitelist and the SUBJECT whitelist doesnt have the "match whole..." check box
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 29.Apr.2008 9:25:53 AM
|
|
|
John Letourneau
Posts: 1089
Joined: 28.Apr.2008
From: Clayton, NC
Status: offline
|
jbraly,
If you look at the "Match whole words only" section it does state that this will be for the subject/body.
_____________________________
Regards,
John Letourneau - Senior Technical Support Representative
GFI Software - www.gfi.com
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 29.Apr.2008 9:36:16 AM
|
|
|
jbraly
Posts: 11
Joined: 25.Apr.2008
Status: offline
|
I see that now, it is checked, we shall see the outcome, thanks for your help.
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 1.May2008 8:16:41 AM
|
|
|
jbraly
Posts: 11
Joined: 25.Apr.2008
Status: offline
|
No change.
Still get emails with:
From: VIAGRA ® Official Site [jbraly@stj.pvt.k12.al.us]
SUBJECT: Dear jbraly@stj.pvt.k12.al.us April 87% 0FF
I have added 0FF (thats zero FF) to the subject keyword checking long before this email came in.
I have "STJ" in the whitelist keyword list, and I have "Match whole words only..." checked.
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 1.May2008 9:07:04 AM
|
|
|
John Letourneau
Posts: 1089
Joined: 28.Apr.2008
From: Clayton, NC
Status: offline
|
jbraly,
This is going to require us to take a look at your logs to see what is allowing these messages into your organization. Normally these types of problems are a configuration issue and the logs will allow us to find this. Please submit a support request at http://support.gfi.com/supportrequestform.asp so we can diagnose this further.
_____________________________
Regards,
John Letourneau - Senior Technical Support Representative
GFI Software - www.gfi.com
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 1.May2008 10:00:04 AM
|
|
|
jbraly
Posts: 11
Joined: 25.Apr.2008
Status: offline
|
ugh, the troubleshooter is so cumbersome, I will have to put it off when I have more time or GFI creates an easier way to diagnos issues like this. Which ever comes first.
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 1.May2008 10:24:10 AM
|
|
|
John Letourneau
Posts: 1089
Joined: 28.Apr.2008
From: Clayton, NC
Status: offline
|
jbraly,
I'd recommend moving forward with this when you have the time as the logs will provide a lot of insight into why these messages are being allowed in and will provide us with the knowledge we need of your environment to correct this issue for you.
_____________________________
Regards,
John Letourneau - Senior Technical Support Representative
GFI Software - www.gfi.com
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 2.May2008 8:49:16 AM
|
|
|
denspad
Posts: 1
Joined: 2.May2008
Status: offline
|
I do have the time to progress this issue as I am sure it is affecting other GFI users.
I can confirm in advance that my domain is not in the whitelist.
I can confirm in advance that there are NO entries in the Keyword Whitelist (Body)
I can confirm in advance that there are NO entries in the Keyword Whitelist (Subject)
I can confirm in advance that there are NO entries in IP Whitelist
Please advise the next steps to investigate the cause.
Alan Wyatt-Jones
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 2.May2008 8:57:42 AM
|
|
|
John Letourneau
Posts: 1089
Joined: 28.Apr.2008
From: Clayton, NC
Status: offline
|
denspad,
This is going to require us to take a look at your logs to see what is allowing these messages into your organization. Normally these types of problems are a configuration issue and the logs will allow us to find this. Please submit a support request at http://support.gfi.com/supportrequestform.asp so we can diagnose this further.
_____________________________
Regards,
John Letourneau - Senior Technical Support Representative
GFI Software - www.gfi.com
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|
Printable Version
