cancel
Showing results for 
Search instead for 
Did you mean: 

Increased/over-zealous spam catching

jelv
Seasoned Hero
Posts: 26,785
Thanks: 971
Fixes: 10
Registered: ‎10-04-2007

Re: Increased/over-zealous spam catching

No, the mistake is that Plusnet are comparing it against 0.15. I've attached the results from the header analyser - for this message they should have compared against 0.075
jelv (a.k.a Spoon Whittler)
   Why I have left Plusnet (warning: long post!)   
Broadband: Andrews & Arnold Home::1 (FTTC 80/20)
Line rental: Pulse 8 Home Line Rental (£14.40/month)
Mobile: iD mobile (£4/month)
ChrisL
Rising Star
Posts: 760
Thanks: 4
Fixes: 1
Registered: ‎13-12-2007

Re: Increased/over-zealous spam catching

Oh yes! Thank you! "Category filter value" (presumably the GT3) halves the effective spam setting....  I think I'm going to join you on the Quarantine option  Smiley
Dizzley
Grafter
Posts: 275
Registered: ‎17-04-2007

Re: Increased/over-zealous spam catching

What I don't understand is this part of the header of my second example:
X-Ec-Messenger-Email: zopa@xxxxxx.plus.com
X-Pstn-Levels: (S: 0.00000/96.96317 CV:99.9000 )
X-Pstn-Settings: 1 (0.1500:0.1500) cv gt3 gt2 gt1
X-Pstn-Addresses: from <zopalenderemail@messages.zopa.com> [380/17]
X-Pn-Pstn: Spam 1
X-Pn-Virus-Filtered: by PlusNet MXCore (v4.00)
X-Pn-Spam-Filtered: by PlusNet MXCore (v4.00)
Postini scores it as ZERO, but Plusnet says it's spam. Huh?  Shocked
jelv
Seasoned Hero
Posts: 26,785
Thanks: 971
Fixes: 10
Registered: ‎10-04-2007

Re: Increased/over-zealous spam catching

Zero is less than 0.15 so it is considered spam by Postini - the scale works the other way round to what you'd expect - zero is definitely spam, 99 is absolutely certain it's not spam.
Try pasting the headers in to http://www.postini.com/support/header_analyzer.php
jelv (a.k.a Spoon Whittler)
   Why I have left Plusnet (warning: long post!)   
Broadband: Andrews & Arnold Home::1 (FTTC 80/20)
Line rental: Pulse 8 Home Line Rental (£14.40/month)
Mobile: iD mobile (£4/month)
Oldjim
Resting Legend
Posts: 38,460
Thanks: 787
Fixes: 63
Registered: ‎15-06-2007

Re: Increased/over-zealous spam catching

It doesn't like emails from the Halifax either (note - it is a valid email)
Quote
From: Halifax <mail@customer.halifax.co.uk>
Reply-To: Halifax <auto-response@halifax.co.uk>
To: Scott <***@****.plus.com>
Message-ID: <22951845.1208258948531.ecMessenger@customer.halifax.co.uk>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_2142247_6783063.1208258948508"
X-eC-messenger-mid: 700054466
X-eC-messenger-cid: 7086
X-eC-messenger-sender-domain: bounce.customer.halifax.co.uk
X-eC-messenger-IP: 9/DEFAULT
X-eC-messenger-email: ***@******.plus.com
X-pstn-neptune: 25/17/0.68/44
X-pstn-levels:    (S: 0.25451/99.60216 CV:99.9000 R:95.9108 P:95.9108 M:95.5423 C:98.6951 )
X-pstn-settings: 1 (0.1500:0.1500) cv gt3 gt2 gt1 r p m c
X-pstn-addresses: from <mail@customer.halifax.co.uk> [29/1]
X-pstn-neptune-cave-rslt: qtine
X-pn-pstn: Spam 1
X-PN-Virus-Filtered: by PlusNet MXCore (v4.00)
X-PN-Spam-Filtered: by PlusNet MXCore (v4.00)
Subject: [-SPAM-]  Halifax Online Banking - Your online payment screens are changing

jelv
Seasoned Hero
Posts: 26,785
Thanks: 971
Fixes: 10
Registered: ‎10-04-2007

Re: Increased/over-zealous spam catching

Jim,
I'm not sure about that message. Can you paste the full headers in to the header analyser and see what it says.
jelv (a.k.a Spoon Whittler)
   Why I have left Plusnet (warning: long post!)   
Broadband: Andrews & Arnold Home::1 (FTTC 80/20)
Line rental: Pulse 8 Home Line Rental (£14.40/month)
Mobile: iD mobile (£4/month)
Oldjim
Resting Legend
Posts: 38,460
Thanks: 787
Fixes: 63
Registered: ‎15-06-2007

Re: Increased/over-zealous spam catching

It is reasonably happy with no mention of quarantine. So where did this come from "X-pstn-neptune-cave-rslt: qtine"
Quote
Header Analysis Summary
  This message went through the Postini System
  This message was filtered
Overall Evaluation Result Note
Passed Virus Detection Yes
Content Manager Filter off Filter Name: n/a
Approved/Blocked Senders n/a
Passed Spam Detection Yes See spam scores below for more information.
Disposition Delivered Message delivered: see spam scores below for more information.
more information...

Spam Filtering Scores Score Note
Passed Blatant Spam Blocking Yes Message does not score as blatant spam.
Spam Threshold 0.1500 = Bulk Filter Value X Category Filter Value
Higher score is greater sensitivity to spam
Spam Score 0.25451 Calculated by Perimeter Manager
Range: 0(Spam) - 100(Legitimate)
Spam score is above the threshold? Yes Message is not considered spam.
Legitimate sender behavior? -- n/a
more information...

The following values affect the spam Threshold score.
Higher Bulk and Category Filter values indicate an increased sensitivity to spam. more information...
User Settings Value Note
Bulk Filter Setting Most Lenient (1) Most Lenient (1) to Most Aggressive (5)
Bulk Filter Value 0.1500 Value based on Bulk Filter Setting
Category Filter Value 1 Derived from Category Filters below
If a category filter is triggered, spam sensitivity is increased. more information...
Category Filters Result Score (below 85 triggers the filter)
Racially Insensitive -- 95.9108
Sexually Explicit -- 95.9108
Make Money Fast -- 95.5423
Commercial Offer -- 98.6951
Oldjim
Resting Legend
Posts: 38,460
Thanks: 787
Fixes: 63
Registered: ‎15-06-2007

Re: Increased/over-zealous spam catching

Just received a perfectly genuine email and the only possible reason for it falling foul of the spam filter is that it included a link to a web page http://www.dorset-ramblers.co.uk/EastDorset/index.html
Quote
Spam Filtering Scores Score Note
Passed Blatant Spam Blocking Yes Message does not score as blatant spam.
Spam Threshold 0.1500 = Bulk Filter Value X Category Filter Value
Higher score is greater sensitivity to spam
Spam Score 0.02389 Calculated by Perimeter Manager
Range: 0(Spam) - 100(Legitimate)