RE: Viagra ads get through, and yes, I have added it to the keyword checking
|
Logged in as: Guest
|
|
Users viewing this topic:
none
|
|
Login  | |
|
RE: Viagra ads get through, and yes, I have added it to... - 2.May2008 11:19:36 AM
|
|
|
mcusson
Posts: 1
Joined: 2.May2008
Status: offline
|
Please post the outcome. We are getting the exact same email.
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 7.May2008 8:46:28 AM
|
|
|
egypt123
Posts: 19
Joined: 4.Dec.2006
Status: offline
|
Sorry for the rant, but I'll tell you right now and until I'm blue in the face that GFI's Keyword module only 'works' on an ad-hoc basis, and I really wish I could figure it out... In my opinion, Keywords should be one of the most effective ways to stop the majority of Spam. How I would like GFI ME to work is, as long as Keywords is defined as the top priority module in my configuration, ANYTHING that matches an item in my Keywords list - regardless if the sender or domain is in my Whitelist - should be blocked and the message should be processed according to my rules. All other modules and criteria should be ignored from that point. If someone in our Whitelist wants to include some of those Keywords in their email, then that's their problem and I'll have no problems justifying to my management that that email should be processed as Spam. Just my two cents...
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 7.May2008 9:12:27 AM
|
|
|
John Letourneau
Posts: 807
Joined: 28.Apr.2008
From: Clayton, NC
Status: offline
|
egypt123,
That is the way GFI MailEssentials works. If your Keyword Checking module is above your whitelist modules it will act on the message regardless of who it is from. If this is not happening in your installation then we would need to troubleshoot your installation.
_____________________________
Regards,
John Letourneau - Technical Support Representative
GFI Software - www.gfi.com
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 7.May2008 9:38:36 AM
|
|
|
jbraly
Posts: 11
Joined: 25.Apr.2008
Status: offline
|
John did something for me that SO FAR has worked...
John said:
"I was able to have this message blocked by the Spam URI Realtime Blocklist. Can you let me know which servers you currently have enabled in this module? Thanks."
"This message (the VIAGRA one I sent him) was blocked on my side by multi.surbl.org which leads me to think there may be something allowing this in. Can you do me a huge favor and move your Spam URI Realtime Blocklist above your whitelist in your order module priorities just to rule out that module and any other modules letting the message through (Which I did). The messages I received from you are outside of the timeframe of your ASE Logs so I wasn't able to see exactly what happened with the message."
I have done this and THUS FAR no problems.
Program request...
make the troubleshooter file hokey-pokey game a lot shorter and easier to do quickly. The process of running it, filling it out, saving it, zipping it, FTP-ing it, which in and of itself is do-able, is very time consuming for a one-man shop like me managing 6 servers and 300 machines.
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 7.May2008 12:45:29 PM
|
|
|
rotorblade
Posts: 18
Joined: 7.May2008
Status: offline
|
Having the same problem; it just blows right past our SPF checking module (and everything else as far as that goes), which is above and before our Whitelist module.
Any idea?
Thanks
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 7.May2008 2:17:18 PM
|
|
|
John Letourneau
Posts: 807
Joined: 28.Apr.2008
From: Clayton, NC
Status: offline
|
rotorblade,
In jbraly's case we needed to look at logs to determine what may be allowing these messages in. Generally these types of issues are related to whitelist entries. Please make sure you do not have your own domain on the whitelist.
_____________________________
Regards,
John Letourneau - Technical Support Representative
GFI Software - www.gfi.com
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 7.May2008 3:32:58 PM
|
|
|
rotorblade
Posts: 18
Joined: 7.May2008
Status: offline
|
John,
Same in his case, no WL entries for domain or recipient. SPF module is above in order of WL module. I did try the workaround using the SPAM URI which is hit and miss on tagging. I would like to delete using SPF module but it just goes by untouched. Looking at header information, the e-mails are spoofing the MIME address which, SPF module should be picking up. correct? I don't seem to have a problem stopping any other spoofed e-mails but the VIAGRA e-mails.
What logs would you like to see?
RB
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 7.May2008 7:54:59 PM
|
|
|
John Letourneau
Posts: 807
Joined: 28.Apr.2008
From: Clayton, NC
Status: offline
|
rotorblade,
If jbraly's configuration holds up then it is an address on his whitelist that is allowing the message in. In his case we moved the spam module that would normally block these messages above the whitelist (which could be allowing the messages in) and the messages have stopped. In order for us to look at the logs needed I would need you to contact support at http://support.gfi.com/supportrequestform.asp.
_____________________________
Regards,
John Letourneau - Technical Support Representative
GFI Software - www.gfi.com
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 8.May2008 1:09:42 PM
|
|
|
rotorblade
Posts: 18
Joined: 7.May2008
Status: offline
|
Ok will do.
RB
|
|
|
|
|
RE: Viagra ads get through, and yes, I have added it to... - 9.May2008 1:48:25 PM
|
|
|
pv2k
Posts: 5
Joined: 9.May2008
Status: offline
|
To all,
I had the same problem, especially with the viagra emails...
Check your SafeSender list in Outlook. tools | options | Junk email | safe senders
make sure "trust email from my contacts" is uncheck, and the list is blank..
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|
Printable Version
