Messaging Gateway

Hi Guys I am new to Symantec Brightmail Gateway (start touching it today) I have emails from a domain all are identified as SPAM by the policy as below: "If the following condition is met: If a message is spam" I need to know why this sender domain is categorized as spam. I checked "Brightmail IQ Service" aginst the sender IP, it is rated as neutral. I checked DNSBL, not on the list. So how can I know why Symantec treated this sender as a spamer? Thanks in advance.

You'll want to check the message audit logs and see what the brightmail tracker says. If you post it here we can try to give you some guidelines. Since our spam detection system is proprietary and spammers are constantly trying to bypass us, I can't promise we can tell you much.

The most likely cause is one of their IP address is on our block list.

once you have the IP address from the message logs, you can check the reputation under, Reputation, Find IP ... something (I'm not at my system).

I also recommend http://www.mxtoolbox.com/  which can check the IP address against other antispam lists.

Hi,

It is not possible to share company proprietary information about why emails are given a spam verdict. However you can follow the procedure in this article to obtain the legitimate message and submit it to Symantec for filter review:

http://service1.symantec.com/SUPPORT/ent-gate.nsf/docid/2005012415180263

Hope that helps,

Amanda