cancel
Showing results for 
Search instead for 
Did you mean: 

Router Log email rejected as spam

Grafter
Posts: 109
Thanks: 4
Registered: ‎12-07-2007

Router Log email rejected as spam

I have set up my NETGEAR router to send me hourly emails of its log. This worked ok for a day or so, but now the outgoing emails are being rejected as spam as the log is reporting.

[email failed] ssmtp: 552 zxasjWBLeNXR9zxaujzgy6 message rejected due to spam or virus. If you b, Monday, July 27, 2020 07:30:40

As you can see some of the text has been cut off. I would like to be able to override the spam filter any ideas how?

Thanks

David

18 REPLIES 18
Seasoned Hero
Posts: 5,799
Thanks: 2,561
Fixes: 169
Registered: ‎30-06-2016

Re: Router Log email rejected as spam

@dgp 

Alternatively it is being sent OK but it is your destination incoming mail server rejecting it. What is the mail server you are addressing it to?

Grafter
Posts: 109
Thanks: 4
Registered: ‎12-07-2007

Re: Router Log email rejected as spam

The outgoing server is relay.plus.net. I’m sending it to myself so both incoming and outgoing servers are Plusnet.

Seasoned Hero
Posts: 5,799
Thanks: 2,561
Fixes: 169
Registered: ‎30-06-2016

Re: Router Log email rejected as spam

@dgp 

You could try emailing it to a free gmail account and see what happens.

Grafter
Posts: 109
Thanks: 4
Registered: ‎12-07-2007

Re: Router Log email rejected as spam

Thanks.Tried that and it went into my Gmail spam folder as it wasn’t coming from a Gmail server, but I was able to adjust the filters so it now goes into the normal inbox. I assume this means the original Plusnet email was being bounced by the incoming rather than outgoing server.

Would prefer to use Plusnet email though.

Superuser
Superuser
Posts: 9,177
Thanks: 2,250
Fixes: 163
Registered: ‎30-07-2007

Re: Router Log email rejected as spam

Are you using a valid something@<accountname>.plus.com address as the 'from' ?

Grafter
Posts: 109
Thanks: 4
Registered: ‎12-07-2007

Re: Router Log email rejected as spam

I am using one of the something@somethingelse.me.uk addresses that were handed out many years ago as an alternative to the something@username.plus.com addresses.

Superuser
Superuser
Posts: 9,177
Thanks: 2,250
Fixes: 163
Registered: ‎30-07-2007

Re: Router Log email rejected as spam

@dgp  I was going to suggest it MIGHT be lack of SPF on the domain in question, but I notice you posted in this thread https://community.plus.net/t5/Email/How-to-set-spf-DNS-record/m-p/1714763#M30239 a while ago.

Did you set up SPF for the domain ?

It might be worth changing the from address to a username.plus.com just to see if it makes any difference

Grafter
Posts: 109
Thanks: 4
Registered: ‎12-07-2007

Re: Router Log email rejected as spam

Hi Yes I did set up the SPF and that seemed to solve the problem I had then. I’ve now tried the username.plus.com option. It made no difference as.it was rejected in the same way as if it had come from the me.uk address.

Superuser
Superuser
Posts: 9,177
Thanks: 2,250
Fixes: 163
Registered: ‎30-07-2007

Re: Router Log email rejected as spam

I assume other emails you are sending aren't getting tagged as spam ?

It looks like the Cloudmark anti-spam system is detecting what it thinks is a spam signature in the router emails.

Does it contain any URLs ?

Is it possible to adjust the content of the emails in any way , headers/footers for example , to see what might be causing the false positive detection

Grafter
Posts: 109
Thanks: 4
Registered: ‎12-07-2007

Re: Router Log email rejected as spam

Interestingly I have had the odd email treated as spam which does have URLs. Usually when I've forwarded an email to someone else. All I've done then is resend using another email address.

In this case the log includes URLs which have either been authorised or blocked. Unfortunately its not possible to adjust the format of the email with the log, its a standard Netgear router.

UPDATE - It’s now rejecting the emails to the gmail.com address.☹️

Superuser
Superuser
Posts: 9,177
Thanks: 2,250
Fixes: 163
Registered: ‎30-07-2007

Re: Router Log email rejected as spam

The Plusnet email system uses the Cloudmark anti-spam system. As well as processing incoming mail, It parses outgoing email to attempt to prevent spam being sent by the plusnet relays. We've seen a few situations where certain URL's in outgoing emails have triggered it to prevent sending of the email. Preventing these false positives involves examing samples of the emails to retrain the Cloudmark system. That's not going to be possible with your router logs by the sounds of it, due to the number of URLs's likely to be in them.

I'm not sure there's anything that can be done in this situation, other than sending the router logs via another smtp server if you have access to one. Even that's likely to be a temporary work around as every email system is going to be trying, sooner or later,  to reduce the amount of spam being sent and will be using similar techniques to the Cloudmark system.

 

Grafter
Posts: 109
Thanks: 4
Registered: ‎12-07-2007

Re: Router Log email rejected as spam

Thanks. Thats interesting as one emailed log has just got through. So its probable that one or more of the URLs being detected by my router is falling foul of the Cloudmark system, its just working out which one (or ones) it is could take some time. Even then it's possible the URL is rightly being rejected. I'll try using the Gmail SMTP settings to see if that works. In the meantime if I get any other emails bounced how do I let Plusnet know so they can update Cloudmark?

Superuser
Superuser
Posts: 9,177
Thanks: 2,250
Fixes: 163
Registered: ‎30-07-2007

Re: Router Log email rejected as spam

I'm not sure there's any formal mechanism to report, Cloudmark is supposed to be intelligent and to keep itself updated.

The normal mechanism is to post on here and for a PlusNet staffer to request a copy of the failed email, but in the current situation, being brutally honest,  I suspect it's not going to be high on anyones priority list.

Superuser
Superuser
Posts: 16,677
Thanks: 6,861
Fixes: 63
Registered: ‎22-08-2007

Re: Router Log email rejected as spam

@JW 

Is the signature in post #1 enough to have someone examine the logs please?  As noted, given these emails come out of the router, it will be difficult, if not impossible, to get hold of the original email if it is not somewhere in the SMTP server(s).