cancel
Showing results for 
Search instead for 
Did you mean: 

Spam filter needs an overhaul.

FIXED
jab1
Legend
Posts: 16,815
Thanks: 5,339
Fixes: 248
Registered: ‎24-02-2012

Spam filter needs an overhaul.

I can only work on the last fortnights email, as I clear out my 'DELETED' folder usually weekly, but forgot last week.

ALL emails from the following valid senders are being tagged 'SPAM' - fortunately I have 'reject spam' set to off, otherwise I would have lost important information.

The Solar Centre.

Apple

Music Magpie

Flowercard

Acronis

Patisserie Valerie.

Any chance someone can check why this is happening please. These are ALL valid senders!!

John
11 REPLIES 11
JOLO
Plusnet Alumni (retired)
Plusnet Alumni (retired)
Posts: 1,149
Fixes: 77
Registered: ‎06-08-2018

Re: Spam filter needs an overhaul.

Hi @jab1,

 

I can only assume the filter is picking something up from mail and getting confused thinking it's spam. Would it be possible to provide a copy of the headers? In the meantime it might be worth adding some of those senders to your 'approved list'.

jab1
Legend
Posts: 16,815
Thanks: 5,339
Fixes: 248
Registered: ‎24-02-2012

Re: Spam filter needs an overhaul.

@JOLO I will provide headers from one each of those senders sometime this week - a tad busy at the moment.

Also an additional sender (but only on one email from a non-standard 'sender - the bit before the '@') and that was NatWest!!

John
RandallFlagg
Plusnet Alumni (retired)
Plusnet Alumni (retired)
Posts: 1,915
Fixes: 75
Registered: ‎11-01-2018

Re: Spam filter needs an overhaul.

 

No worries, @jab1

 

Just send us the headers across when you get the opportunity.

 

Best wishes

 

Dave

jab1
Legend
Posts: 16,815
Thanks: 5,339
Fixes: 248
Registered: ‎24-02-2012

Re: Spam filter needs an overhaul.

@JOLO, @RandallFlagg How much of the header do you need? Thunderbird (my email client), has a problem with displaying them when they are long.

John
RandallFlagg
Plusnet Alumni (retired)
Plusnet Alumni (retired)
Posts: 1,915
Fixes: 75
Registered: ‎11-01-2018

Re: Spam filter needs an overhaul.

 

Hi @jab1

 

Ideally as much as possible.

 

I've included an example below - the dark green area is the authentication section which relates to spam, so definitely that section if you have it.

 

Thanks

 

Dave

 

jab1
Legend
Posts: 16,815
Thanks: 5,339
Fixes: 248
Registered: ‎24-02-2012

Re: Spam filter needs an overhaul.

Cheers, @RandallFlagg - I'll have a go in the next couple of days.

John
jab1
Legend
Posts: 16,815
Thanks: 5,339
Fixes: 248
Registered: ‎24-02-2012

Re: Spam filter needs an overhaul.


@RandallFlagg wrote:

 

Hi @jab1

 

Ideally as much as possible.

 

I've included an example below - the dark green area is the authentication section which relates to spam, so definitely that section if you have it.

 

Thanks

 

Dave

 


Sorry for the long reply, but you did ask.Smiley The senders, in order are: Patisserie Valerie, Acronis, Flowercard,,MusicMagpie, ,Apple, eBay, and The Solar Centre,

From - Thu Nov 29 08:20:51 2018
X-Account-Key: account4
X-UIDL: UID17169-1329127561
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                                 
Return-path: <agent@cakeclub.patisserie-valerie.co.uk>
Envelope-to:.plus.com
Delivery-date: Wed, 28 Nov 2018 22:16:32 +0000
Received: from [212.159.8.109] (helo=avasin15.plus.net)
	  by inmx09.plus.net with esmtp (PlusNet MXCore v2.00) id 1gS88G-0007qn-CX 
	  for xxx.plus.com; Wed, 28 Nov 2018 22:16:32 +0000
Received: from mta7129.pur3.net ([92.52.71.29])
	by Plusnet Cloudmark Gateway with ESMTP
	id S88EgkNoqxWh7S88GgHl9j; Wed, 28 Nov 2018 22:16:32 +0000
X-BV-Spam-Flag: Yes
X-IPAS: Level1
X-CM-Score: 100.00
X-CNFS-Analysis: v=2.3 cv=bbtFrtHB c=1 sm=1 tr=0 b=1 p=mMwfmQdVGsxSoVno:21
 p=-E-w8XLmTfBywwCH:21 p=DbV7nQN-V4w7B3pd2xMA:9 p=k8NidMN3Xa9gpiFl:21
 p=_u-ztdaz0N3piV9S:21 a=rOTFZkyZbwvCk2rEbVBsLA==:117
 a=rOTFZkyZbwvCk2rEbVBsLA==:17 a=oHHRNoSmSjYA:10 a=-uNXE31MpBQA:10
 a=uA4TKYq0AAAA:8 a=3j4BkbkPAAAA:8 a=QqRNn7y2lFM-M8ubwSMA:9 a=QEXdDO2ut3YA:10
 a=SgM1It4r9HwA:10 a=AQITcnAMtj8A:10 a=EODpt2qlbhUA:10 a=KMGjkV5zA44A:10
 a=5_tI9Brk7jgA:10 a=9vOZ_aoA0lEA:10 a=EJwTnBkPAAAA:8 a=kE07ZEVUAAAA:8
 a=KAcHVYHd--L6th41:21 a=_W_S_7VecoQA:10 a=frz4AuCg-hUA:10 a=M0Bmp0p02fsA:10
 a=tZ7JyqHZ4X8A:10 a=03zS_zNwBJ0A:10 a=y_8wgkUEp8FuCsqjcEYu:22
 a=m2md50hKvxGFljxr9xim:22 a=OT_68GJDMBBEcBTpMnOC:22
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=pureresponse; d=cakeclub.patisserie
From - Fri Nov 23 16:09:31 2018
X-Account-Key: account4
X-UIDL: UID17110-1329127561
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                                 
Return-path: <suite17@xpressus.emsmtp.us>
Envelope-to:xxx.plus.com
Delivery-date: Fri, 23 Nov 2018 16:02:12 +0000
Received: from [212.159.9.108] (helo=avasin12.plus.net)
	  by inmx16.plus.net with esmtp (PlusNet MXCore v2.00) id 1gQDuG-0003RS-DZ 
	  for xxx.plus.com; Fri, 23 Nov 2018 16:02:12 +0000
Received: from suitepmta134123.emsmtp.us ([83.68.134.123])
	by Plusnet Cloudmark Gateway with ESMTP
	id QDuDgsF0bKymcQDuGgxj3m; Fri, 23 Nov 2018 16:02:12 +0000
X-BV-Spam-Flag: Yes
X-IPAS: Level1
X-CM-Score: 100.00
X-CNFS-Analysis: v=2.3 cv=V7lTL9vi c=1 sm=1 tr=0 b=1 p=oH5vT6yLArt-ulRK0jYA:9
 p=-QKGwIgWERgtCh3u3mYA:9 a=edpXgVsGvg8eSV+7Ph4/dw==:117
 a=edpXgVsGvg8eSV+7Ph4/dw==:17 a=MKtGQD3n3ToA:10 a=1oJP67jkp3AA:10
 a=1gGof8kZl80A:10 a=-uNXE31MpBQA:10 a=ZZnuYtJkoWoA:10 a=dJYnVhUtAAAA:8
 a=vnREMb7VAAAA:8 a=jU4qhlNgAAAA:8 a=JqEG_dyiAAAA:8 a=BkpHzsgbAAAA:8
 a=3j4BkbkPAAAA:8 a=Uj0gMU6hAAAA:8 a=QEXdDO2ut3YA:10 a=IGPXEDbx7NkA:10
 a=Rd0pikts-kcA:10 a=u3ke0JHczUQA:10 a=87COOerbOC4A:10 a=CwVEW5s1O_gA:10
 a=-FEs8UIgK8oA:10 a=NWVoK91CQyQA:10 a=SSmOFEACAAAA:8 a=47YNd_HU81mhrzjz:21
 a=frz4AuCg-hUA:10 a=VavykzcozogA:10 a=rA7B2sRHbwqyddgz4uKf:22
 a=oa3KAI9qiCm0rG2ttf_3:22
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=key2; d=sender.acronis.online;
 h=To:Subject:From:MIME-Version:List-Id:List-Unsubscribe:Content-Type:Message-ID:Date; i=noreply@sender.acronis.online;
 bh=Zlg+WZ4hFBgi2/Yim/G5noBIgeZ1WqqZ1iZIU1Ae5Xc=;
 b=UmOvmvH5aZHlKNZnbzx166wTCMBXXY4G7oUhQSvC0KLJJyw0lUhRUduWXwNnD6IcSJLIQ06YYIS7
   VSoGe73JfaZlxIE9buf5Zq7wkkQ9n9sbSmWXqyyfZ9ry39Daphosxn6rTqtbFwacGACBrhR9yoVq
   rB+UXRW7kAYH6NRBb08=
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=key2; d=emarsys.net;
 h=To:Subject:From:MIME-Version:List-Id:List-Unsubscribe:Content-Type:Message-ID:Date;
 bh=Zlg+WZ4hFBgi2/Yim/G5noBIgeZ1WqqZ1iZIU1Ae5Xc=;
 b=RK53B8I98ge0/OlDxp/a6pQt00aqVxhXQOzGronLuT82mtp1W0cAqsNEei/1xRDlw6ZqrnxKfR+X

 

From - Tue Nov 13 17:11:00 2018
X-Account-Key: account4
X-UIDL: UID17001-1329127561
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                                 
Return-path: <bounce-mc.us19_101262506.54529-xxx.plus.com@mail198.atl121.mcsv.net>
Envelope-to: xxx.plus.com
Delivery-date: Tue, 13 Nov 2018 16:49:28 +0000
Received: from [212.159.8.109] (helo=avasin09.plus.net)
	  by inmx07.plus.net with esmtp (PlusNet MXCore v2.00) id 1gMbsW-00011q-8Y 
	  for xxx.plus.com; Tue, 13 Nov 2018 16:49:28 +0000
Received: from mail198.atl121.mcsv.net ([198.2.131.198])
	by Plusnet Cloudmark Gateway with ESMTP
	id MbsTgwZ27wEwdMbsVgV7sc; Tue, 13 Nov 2018 16:49:28 +0000
X-BV-Spam-Flag: Yes
X-IPAS: Level1
X-CM-Score: 100.00
X-CNFS-Analysis: v=2.3 cv=fO0XI6Se c=1 sm=1 tr=0 b=1 p=b15AQ0TCmkvHLJsRGbEA:9
 a=08IdXygtegHhJctKYfhvHg==:117 a=08IdXygtegHhJctKYfhvHg==:17
 a=JHtHm7312UAA:10 a=-uNXE31MpBQA:10 a=_Yaxip1i1oYA:10
 a=9DvhAHx2yrWFMPxQWpQA:9 a=5obicqMlAAAA:8 a=j6yTz95HAAAA:8 a=3j4BkbkPAAAA:8
 a=BkpHzsgbAAAA:8 a=vnREMb7VAAAA:8 a=JmhL_RV-AAAA:8 a=A6hElKMzkYvKQ9HFAm0A:9
 a=gtc0J7hetxLravUc:21 a=Wot4C6hXVdgx7zvY:21 a=QEXdDO2ut3YA:10
 a=EGHu0Q4xVOoA:10 a=SSmOFEACAAAA:8 a=lJjz8N4HAAAA:8 a=ftbRNtaMiHhZqIEU:21
 a=hnWOgajJpAqbH-Wr:21 a=Y0AUEEh5SmV8dea-:21 a=_W_S_7VecoQA:10
 a=frz4AuCg-hUA:10 a=Jt41xuF9nUEA:10 a=uUIsLfDk0JFcyPkdChej:22
 a=iEMO7MLoSfOkq17C7Rlc:22
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=k1; d=mailchimpapp.net;

 

From - Tue Nov 20 18:22:23 2018
X-Account-Key: account4
X-UIDL: UID17068-1329127561
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                                 
Return-path: <4adbs16had4uk9mmms0wny40n2q6hqg7-b@e-musicmagpie.co.uk>
Envelope-to: xxx.plus.com
Delivery-date: Tue, 20 Nov 2018 18:19:09 +0000
Received: from [212.159.8.109] (helo=avasin17.plus.net)
	  by inmx05.plus.net with esmtp (PlusNet MXCore v2.00) id 1gPAc9-0001Yp-6l 
	  for xxx.plus.com; Tue, 20 Nov 2018 18:19:09 +0000
Received: from ms205.bronto.com ([216.27.63.205])
	by Plusnet Cloudmark Gateway with ESMTP
	id PAc6gwfXAhItyPAc8gqOVj; Tue, 20 Nov 2018 18:19:09 +0000
X-BV-Spam-Flag: Yes
X-IPAS: Level1
X-CM-Score: 100.00
X-CNFS-Analysis: v=2.3 cv=X/581lbe c=1 sm=1 tr=0 b=1 p=Z9UM-HQJXMhnWOMv:21
 a=dw3K89Dcx53+cMSdJVrFgw==:117 a=dw3K89Dcx53+cMSdJVrFgw==:17
 a=JHtHm7312UAA:10 a=-uNXE31MpBQA:10 a=0wxzS9jGAAAA:8 a=U_uYneYEOCNPsDDYmB4A:9
 a=SC_8TbDv0pH3laC-:21 a=oMUEawVzRhDKiYss:21 a=QEXdDO2ut3YA:10
 a=SSmOFEACAAAA:8 a=eENt2Ue0AAAA:8 a=AxOOYr6DzaKrml2mNZMA:9
 a=FojgiWvE8kxNx7AV:21 a=Kmec04RYJvhgGllj:21 a=_W_S_7VecoQA:10
 a=frz4AuCg-hUA:10 a=7CGuuBdOBFOyLbRhPcJz:22 a=iTif10koGk4RPk-uBK1t:22
DKIM-Signature: v=1; a=rsa-sha256; c=simple; s=bdk; d=e-musicmagpie.co.uk;
 h=Content-Type:Date:From:List-Unsubscribe:Message-ID:MIME-Version:Reply-To:
 Subject:To; i=musicmagpie@e-musicmagpie.co.uk;
 bh=20u6JULHR6gs2fZ6gntlQ0j8yHX0ztIXp28BMhFf8+E=;
 b=L0BuvML295PSsaVp05Wcs9lWfobToZ8mlT3e6dnW6E9uopTJDInwJ70H67gV0Q4oa7D44wQfSNWK
   DPLY/3Y/GczPoxTCYmmrk+8alea7AXwfLkSvZalw6DFPd4jrPDb4VLDAhUa6mRDWJjfshEpM5RvB
   zuBxpFU2GPEPPcvDNrM=
Received: from localhost (10.0.2.127) by ms205.bronto.com id huh81o2fla0t for <mystuff@mystic3.plus.com>; Tue, 20 Nov 2018 13:19:05 -0500 (envelope-from <4adbs16had4uk9mmms0wny40n2q6hqg7-b@e-musicmagpie.co.uk>)
Content-Type: multipart/alternative; boundary="==Multipart_Boundary_xc75j85x"
Date: Tue, 20 Nov 2018 18:18:57 +0000
Feedback-ID: R000864A62B0E16F5EB9EE5D79444281D7B1:0bc803eb0000000000000000000000260129:0bc803ee0000000000000000000003e4a672:Bronto
From: =?UTF-8?Q?musicMagpieStore?= <musicmagpie@e-musicmagpie.co.uk>
List-Unsubscribe: <mailto:4adbs16had4uk9mmms0wny40n2q6hqg7-u@e-musicmagpie.co.uk>, <http://e-musicmagpie.co.uk/public/webform/render_form/default/e8b140fe4dfabd64141d7cf0e9de3a39/unsub/7k0dgv4whwqebpwe0eafv5fa8s8v7/budvyqodzgziyynostzombrpxtlubpn?td=VSNVoUmOSVC15ChGUlRY1gt5qFt-hiB1FUoMUgKjIgyM-BVCJWVfhwZWpFYlq2uYbJXbJAh8GGkRRtSHcd7l5NzQopma9-maN59hIl_kLktTyLUGG_izJGnmLOVYCn6ReHJCrPwLrG_OzB3HweasaTDPDT7KEnOrpEp_PWsQ6Mk6f4Vn_s75f4Pw&tid=061792458919456193970047784155246587360172108635348279588515392723894906819758565569126963>
Message-ID: <4adbs16had4uk9mmms0wny40n2q6hqg7.qg7.1542737937@e-musicmagpie.co.uk>
MIME-Version: 1.0
Precedence: bulk
Reply-To: =?UTF-8?Q?musicMagpieStore?= <4adbs16had4uk9mmms0wny40n2q6hqg7@e-musicmagpie.co.uk>
To: <mystuff@mystic3.plus.com>
X-campaignID: bm23_budvyqodzgziyynostzombrpxtlubpn
X-Mailer: BM23 Mail
X-CMAE-Envelope: MS4wfKv+PrmKKUZaZI3tHExmBPEU6ZH6xSvbh6tWZzbCagEp2zuCYTHN/CBeDDuUJPD9DJ/EUA8Cnf8CkxlG2f6degS1udIhdwIv6OmrOnc27SUuZIj3+IUj
 /ohh78E7rJ6cHyk6zY2SZ9wntHHygiNPFZqXo5/bfGhJ3BDc0sNA769fnO5yVQ/UMWZ+but5g4dw2VyF5M7CiIqtYZv7SAbzpksuMjbIin3jIkIb6eQeUjkg
X-pn-pstn: Spam 1
X-PN-Virus-Filtered: by PlusNet MXCore (v5.00)
X-PN-Spam-Filtered: by PlusNet MXCore (v5.00)
Subject: [-SPAM-]
 =?utf-8?Q?Check=20out=20our=20Deal=20of=20the=20Day!=20=F0=9F=91=87?=
X-Antivirus: Avast (VPS 181120-4, 20/11/2018), Inbound message
X-Antivirus-Status: Clean

 

From - Mon Nov 26 08:32:17 2018
X-Account-Key: account4
X-UIDL: UID17126-1329127561
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                                 
Return-path: <news_europe@insideapple.apple.com>
Envelope-to: xxx.plus.com
Delivery-date: Mon, 26 Nov 2018 01:53:13 +0000
Received: from [212.159.9.108] (helo=avasin20.plus.net)
	  by inmx08.plus.net with esmtp (PlusNet MXCore v2.00) id 1gR65J-0000Xq-Qm 
	  for xxx.plus.com; Mon, 26 Nov 2018 01:53:13 +0000
Received: from rn2-msbadger10101.rno.apple.com ([17.179.250.140])
	by Plusnet Cloudmark Gateway with ESMTP
	id R65GgOH8IuEPNR65Jgv6qn; Mon, 26 Nov 2018 01:53:13 +0000
X-BV-Spam-Flag: Yes
X-IPAS: Level1
X-CM-Score: 100.00
X-CNFS-Analysis: v=2.3 cv=Iugwjo3g c=1 sm=1 tr=0 b=1 p=Yt8hrDxAKrzF9HXUCNkA:9
 p=jMC9VPOboV9Mi-OZ:21 p=3gjHP7xzX9iJPyYI318A:9 p=FQA2cgmr32HuNE_P:21
 a=Kkb9flqsO9V4/nvxPNp5pw==:117 a=Kkb9flqsO9V4/nvxPNp5pw==:17
 a=O76VCmqbo-wA:10 a=-uNXE31MpBQA:10 a=t-IPkPogAAAA:8 a=84dIBmoXWKSE42Z2:21
 a=QEXdDO2ut3YA:10 a=oaCj318M7NnPIdrP:21 a=hYx3JsY40fG5xS2H:21
 a=_W_S_7VecoQA:10 a=frz4AuCg-hUA:10 a=y85AKpeX8sTgZG6YX2Fa:22
 a=HH7FIXwXL_sUf1zzYxQd:22
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=insideapple.apple.com; s=insideapple0517; t=1543197190;
	bh=9WBSTeRP00MwHQpmBJZcgIMbOWzDKMm9fg4H/JdCtkk=;
	h=Date:From:To:Message-ID:Subject:Content-Type;
	b=xU1D9DO0rh6bIBG856JzDweRCZaOUzM0cwNof2BDUoX2HIIZmxC39rkNiM2mx3rYa
	 iPAUPe8AcfLgNSpbbcUc4L8GPfTKjP+A+pGJj10R6t3IEVKbit+BHJF7+TkszWanV4
	 Oao4IiSvb64JjT5i6k20FD+IKIBtwU1WEA5Bjg83tmFwsJfs/fICtMwGAyC4hYO3wa
	 1xj8+X2Iag9iQSEEpQkb6petlcMjpG1QD3r1UjOexSUQJ5LjNk9c0NFftR5UEyYPri
	 Jyxq2ewr8hiDMCZZCo4qdf3H4uUxSN9vQh0ycp8/gAA3CFIyKySInL8640/Q+K65g9
	 ampXGUecbjP6Q==

 

From - Mon Nov 19 16:06:45 2018
X-Account-Key: account4
X-UIDL: UID17055-1329127561
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys: shopping                                                                        
Return-path: <ebay@ebay.co.uk>
Envelope-to: xxx.plus.com
Delivery-date: Mon, 19 Nov 2018 16:02:21 +0000
Received: from [212.159.9.108] (helo=avasin06.plus.net)
	  by inmx16.plus.net with esmtp (PlusNet MXCore v2.00) id 1gOm0D-0005nT-Cn 
	  for xxx3.plus.com; Mon, 19 Nov 2018 16:02:21 +0000
Received: from sonic304-22.consmr.mail.ir2.yahoo.com ([77.238.179.147])
	by Plusnet Cloudmark Gateway with ESMTP
	id Om0AgO29Rei8lOm0CgmmxY; Mon, 19 Nov 2018 16:02:21 +0000
X-IPAS: Level4
X-CM-Score: 97.00
X-CNFS-Analysis: v=2.3 cv=A9dCwZeG c=1 sm=1 tr=0 p=SGfKrGSrBXMA:10
 a=3VDJAzKUE1ziLDA3QFlAlg==:117 a=yU2CK+AmBJSaTRwjuhhWWw==:17
 a=6yV2R2LFpXgA:10 a=IkcTkHD0fZMA:10 a=JHtHm7312UAA:10 a=TeuQqM9sAAAA:8
 a=pjdaNNIBAAAA:8 a=mbZ05ln8AAAA:8 a=pwIP7ZobAAAA:8 a=vGf1tOB8AAAA:8
 a=ogjc0hTyAAAA:8 a=3j4BkbkPAAAA:8 a=JqEG_dyiAAAA:8 a=sS8pAsIuAAAA:8
 a=BkpHzsgbAAAA:8 a=gBBYDxZnKw12SFflAIEA:9 a=uNqsNGvZnf6rRNAK:21
 a=I-2qQBNcI-ugaKmB:21 a=DZmbCn8XeORZE_ku:21 a=_W_S_7VecoQA:10
 a=frz4AuCg-hUA:10 a=L03L2QfmqWoA:10 a=QEXdDO2ut3YA:10
 a=7Hch-EpX9yOYQ3APR0_A:22 a=UvZhmuGTKIIfDQoQ70N1:22 a=_snZS95ApfdlrOaEv5He:22
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1542643338; bh=f4ORW/o0Iy8/KQIdNS2aO2EevGuiH/yV5WZm1sV5Pwg=; h=Date:From:To:Subject:From:Subject; b=fKjey6G3xFVIi1dNO0XtgPHxlA/NsQ53hr//NAne/YE0/iUuLejJLpgDaQ1RW5wnI3gTMmtx/BnLKzHKprhgVvC/uI9tdPOAtyFH4Z/cbH0TpxdrcMUu/ePxSKhtMIgvmsLt2jHz2SGcYJVKZv94W7CZMwsMEo8BJRaJc111YcMucsKV5b9KilqFKDEDZRE04Tq5CWZwpnueP8Ps2f577nH+ok2Tn/ZHYPz9vIOsusyNc3ZjgnmEl2H9kbe2N9zcndAxD05qNO5LPbbHbKsi7Kyc6I1Jrg7igTewdUJbHOgvYuIughC3JbAoqk58gQZ7sua/q6Dt+TXyjt9ezIJjHw==
Received: from sonic.gate.mail.ne1.yahoo.com by sonic304.consmr.mail.ir2.yahoo.com with HTTP; Mon, 19 Nov 2018 16:02:18 +0000
X-Apparently-To: john.burnand@yahoo.co.uk; Mon, 19 Nov 2018 16:02:17 +0000
Received-SPF: pass (domain of ebay.co.uk designates 66.135.202.21 as permitted sender)
X-YMailISG: OUMxF_oWLDvBiJ4KtIWHEi3LAvYyZnJtXNwEurJrSMOAtaEu
 HST5zW85DH1bhIopIy0SgOWlsNpqj.9sl5EhKbLRsP0tGSN9z.ABgY6qWo9g
 LBvgm3TxlgR_3o5toB45GiGBoJIGgH7CJdDReovCf3xt300hZCnqHdOOAOhj
 vwDk9qPgUluhKsUCB5Nsr5IsEBOavy6t88sqJCwLARGseYiIQMP_BspTvCvs
 XKsBhrbtOzj7kh1unh2K3xpTyNnHGRSJemdprXZ1mOu1EeuzilTlQ7Hii4nK
 l5M_wS_s2DZG_PCb50mZVSHxNsFaOIcEbOsJ4L5XYJQUbVGx_oCeay1mMiAl
 15eUZfClxo1NAEcEdL0F2dZkMuPqyIBMEndF_ctjhk7AuQhvtAdHD2XAlfP1
 X0SweySx.L7gPdbqjgKDyptxHzbmqRUXAnaLCedjHGaokDCyrqwdL.2E0sAk
 fV9A_4BL5sVuOmDaMmwTmY81rWuU677JmpjgONRNu1CRmH5CuE7LPvsMuP.4
 dOMHQma7PMZ070LIbmvmmcC0FkZALekDGPcvFlEClq1Cjg.ZnweV5kXJqx3W
 E8yOE1Xh08pLFM1UJ8iG7GH7vH_fCADtVe_z3dFW8drZER81f7Pkh2gcYOPK
 dIxryeNGQPm7_PBWLMI9cDLueycBSgcff1SPsTZjdxyiBEShwkU4obll6sDv
 pbGHR59Ilz1PIO7DuwadBeR5wharS3UgBpzWd5up.g2FvByMwf58vbvtB9qQ
 3dCIiYY49_uYIjTorXxMKOzOM19ZfbGCEzSk0rYliaXSNrLIbgdd9kzaNDD6
 JEQcopP3Tn9iAAM.NO4f0fIgmDOvICWvhLf9S7_iMqivedepaRbWmqB_T7bs
 toMbrcMw0XHxuF5.6hWx.5sjNy6zTVhXYlYHaXNR8dPPeAI25e7cnsMjYIsq
 7cXpiGO16P9iDF3ipZvOyUcyqVj4OjKePNFkd9x5m8rrWAYaJTg_vdc1kipi
 .v7HDX6BRcvEGm.LMWnWlca3wRpff8c5LELvT8MI.di9XnNCt5GlsHiE4Jb0
 DkLWPG77ZlcLwFT2ClDMXln2eCjwtcMzLK9Hg6z.kUHhYnOEfPC3pij1xzUi
 726_LsTBr.A0zrQHckDvUjz98tYUEOMTjbRkgIkqlQ2COqVjVfaLlmeo6gC8
 l6vdcVfSpSBDkceHhr_KL2ohmx_rvzP6dQ--
X-Originating-IP: [66.135.202.21]
Authentication-Results: mta1055.mail.ir2.yahoo.com  from=ebay.co.uk; domainkeys=neutral (no sig);  from=ebay.co.uk; dkim=pass (ok)
Received: from 127.0.0.1  (EHLO mxlvspool21.ebay.com) (66.135.202.21)
  by mta1055.mail.ir2.yahoo.com with SMTPS; Mon, 19 Nov 2018 16:02:17 +0000
Received: from lvskirk0-2834915.stratus.lvs.ebay.com (lvskirk0-2834915.stratus.lvs.ebay.com [10.173.200.117])
	by mxlvspool21.ebay.com (8.14.7/8.14.7) with ESMTP id wAJG2EM6026391
	for <john.burnand@yahoo.co.uk>; Mon, 19 Nov 2018 09:02:14 -0700
DKIM-Filter: OpenDKIM Filter v2.10.3 mxlvspool21.ebay.com wAJG2EM6026391
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=ebay.co.uk; s=dkim1k;
	t=1542643334; bh=JFgoxQ9f4jgetKHSeAmtBoRxQuQ=;
	h=Date:From:To:Subject;
	b=T/QAl6/uIni+uow88R4T5Lv9ZH2SKCEswzWQEKAVITfaovvUoI71FTUHViMxIhNha
	 YuJ/PbMkrfDqxVq3pTbZkG8w6rtEbR3TCIQuxQzfS/5WnqndGNneDWQlL3LaUwr+QG
	 C2WscUWa6rit9Msz34a/ojwtu/sbptaqPNzE0W7Y=

 

From - Fri Nov 23 08:14:15 2018
X-Account-Key: account4
X-UIDL: UID17099-1329127561
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                                 
Return-path: <bounce-mc.us1_105332.102285-j.burnand=mystic3.plus.com@mail114.atl261.mcdlv.net>
Envelope-to: xxx.plus.com
Delivery-date: Fri, 23 Nov 2018 08:13:05 +0000
Received: from [212.159.8.109] (helo=avasin19.plus.net)
	  by inmx01.plus.net with esmtp (PlusNet MXCore v2.00) id 1gQ6aH-0001wG-4P 
	  for xxx.plus.com; Fri, 23 Nov 2018 08:13:05 +0000
Received: from mail114.atl261.mcdlv.net ([198.2.142.114])
	by Plusnet Cloudmark Gateway with ESMTP
	id Q6aEg0mxDtLbPQ6aGg2zPH; Fri, 23 Nov 2018 08:13:05 +0000
X-BV-Spam-Flag: Yes
X-IPAS: Level1
X-CM-Score: 100.00
X-CNFS-Analysis: v=2.3 cv=QKVGuDDL c=1 sm=1 tr=0 b=1 p=aHbA9juwcCfbmOVEcc8A:9
 a=O17nxFenFI7Lnc+7vZ6wZw==:117 a=O17nxFenFI7Lnc+7vZ6wZw==:17
 a=JHtHm7312UAA:10 a=-uNXE31MpBQA:10 a=_Yaxip1i1oYA:10
 a=9DvhAHx2yrWFMPxQWpQA:9 a=5obicqMlAAAA:8 a=a2JQldzWAAAA:8 a=JmhL_RV-AAAA:8
 a=w9JtuowJZbE8iCRaTqQA:9 a=PCEWNcy2rtPaLn56:21 a=8R9u2cWQ--VmZoEF:21
 a=QEXdDO2ut3YA:10 a=RC6BKcfLrl4A:10 a=NqeLQ7inbVUA:10 a=06tUhemULjAA:10
 a=S5LHJmxnJf0A:10 a=jVV85Tv3DtsA:10 a=5Xu3K1A141IA:10 a=nHS7Uxe80UQA:10
 a=njMIks7AOkYA:10 a=aICh7Pvw7EYA:10 a=2a6DuIzdEicA:10 a=uWcSQHbOgG8A:10
 a=8zQhd_GfJB8A:10 a=cygy-bOPHpYA:10 a=I2OCtCOu-L4A:10 a=KozMRCy1rqQA:10
 a=OMQXeyKGsMEA:10 a=mJIV3Kfxt6cA:10 a=SDa3dTY1b6gA:10 a=0dU6ep_vB94A:10
 a=aETrlp66bKcA:10 a=zr4AGDiDWjIA:10 a=jOrHN-nTu4IA:10 a=SSmOFEACAAAA:8
 a=lJjz8N4HAAAA:8 a=3g80flMcAAAA:8 a=ZFxWSENpQ_lqEr3B:21 a=1uIf_7oYQrJrfZR-:21
 a=93APZ0Ob_pNdeUIE:21 a=gKO2Hq4RSVkA:10 a=_W_S_7VecoQA:10 a=frz4AuCg-hUA:10
 a=ZFReUrqUV5wA:10 a=uUIsLfDk0JFcyPkdChej:22 a=KV6ZXSUt8LPpnYFr4R1v:22
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=k1; d=mailchimpapp.net;
John
HarryB
Plusnet Help Team
Plusnet Help Team
Posts: 5,199
Thanks: 1,466
Fixes: 256
Registered: ‎25-03-2015

Re: Spam filter needs an overhaul.

Thanks for the headers @jab1, I've passed these over to a colleague on our products team so we can investigate this further as initial checks on the headers don't seem to be flagging them up as spam.

 

I'll aim to get back to you as soon as possible once I receive an update.

 

Thanks for your patience.

If this post resolved your issue please click the 'This fixed my problem' button
 Harry Beesley
 Plusnet
HarryB
Plusnet Help Team
Plusnet Help Team
Posts: 5,199
Thanks: 1,466
Fixes: 256
Registered: ‎25-03-2015

Re: Spam filter needs an overhaul.

Fix

Thanks for your patience, I've had a response advising the following in regards to these headers:

I’ve only had a quick look at the headers in the post, but all of them have a positive hit in the X-CNFS-Analysis header string. It’s possible that they’ve since been marked as not-spam by the Cloudmark community as a whole, which means that whilst it was spammy at the time it’s no longer considered to be spam.

This is the expected behaviour, and if a customer thinks something is being incorrectly marked then they can either forward it to the not spam address as an attachment or raise a ticket and we can then query it further with Cloudmark via the appropriate channels.

If using webmail, you should be able to mark as spam/not spam when selecting an email, however the email address (and the mark as spam variant) my colleague referred to is:

spam@spamtraining.plus.com - Emails which are spam but not correctly tagged

notspam@spamtraining.plus.com - Emails tagged as spam which are not

In both cases the message in question should be forwarded as an attachment.

 

I hope this helps.

If this post resolved your issue please click the 'This fixed my problem' button
 Harry Beesley
 Plusnet
jab1
Legend
Posts: 16,815
Thanks: 5,339
Fixes: 248
Registered: ‎24-02-2012

Re: Spam filter needs an overhaul.

@HarryB Thanks for your response and the information.

Sorry, I DON'T use webmail, never have and never will, I find it too clunky.Smiley

I will bear those two email adresses in mind, but I only raised the initial query as I knew those senders were 100% genuine, and as I was receiving quite a bit of mail from them at the time, they stood out.

Your response is marked as the fix.Thumbs_Up

John
Gandalf
Community Gaffer
Community Gaffer
Posts: 26,563
Thanks: 10,265
Fixes: 1,599
Registered: ‎21-04-2017

Re: Spam filter needs an overhaul.

Happy to hear that helped out.

Let us know if you need any further assistance.

From 31st October 2022, I no longer have a regular presence here as I’ve moved on to a new role.
Anoush Mortazavi
Plusnet