Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

Spam filters and Whitelist do not work correctly

Updated: 29 Jun 2010 | 11 comments
Yesname's picture
0 0 Votes
Login to vote
This issue has been solved. See solution.

Hi,

I am using 6.10.295 version, but spam filter and whitelist do not work properly yet.
Some mails from whitelisted domains categorized as spams.

Event viewer:

The message "XXXXX" located in SMTP has violated the following policy settings:
Scan: Auto-Protect
Rule: Check content for spam and delete
The following actions were taken on it:
The message "XXXXX" was marked for Deletion for the following reason(s):
A Filtering Rule was violated.

Other problem: so much spam can not blocked. Match lists are correct.

Can you tell me that the match lists are case insensitive?

Regards,

Valer

PS.: So IMHO the spam filter of this product almost totally unusable for years.

discussion Filed Under:

Comments

TSE-JDavis's picture
19
Mar
2010
1 Vote +1
Login to vote

The email you show here was

The email you show here was caught by a content filtering rule. The whitelist is for antispam functions, that is why it's listed under that heading.

Yesname's picture
23
Mar
2010
1 Vote -1
Login to vote

Thank you for answer. So Mail

Thank you for answer.
So Mail Security does not support whitelist for content filters? It is a big fault.
Are match lists case sensitive or no?
Why t6he filtering rules do not work properly? So much mail was not caught by filtering rules...

BenDC's picture
23
Mar
2010
1 Vote +1
Login to vote

Content filering rules are

Content filering rules are not typically recommended for spam filtering but for general complaince such as preventing some data from coming or leaving the enviroment via email or blocking bad language/content. Typically when one is trying to enforce complaiance or standards it to be for everyone.

Also the whitelist is for the antispam because you do not control the antispam rules and definitions, so if something from a partner,client, customer is blocked by the antispam it allows a way to bypass that. but with a rule you have control over it and the criteria of which is is applied to and matched against.

Yesname's picture
24
Mar
2010
1 Vote -1
Login to vote

If whitelist only for

If whitelist only for antispam functions why is it active without licensed antispam? If content filtering is not intent for antispam filtering why your sample lists filtering spams?

Is matchlists are case sensitive?

So much mail is not caught by content filtering rules.
Anyway content filtering rules do not work right.

TSE-JDavis's picture
24
Mar
2010
1 Vote +1
Login to vote

The whitelist functions for

The whitelist functions for Real-Time Blacklist detections as well, which is a feature that does not require SPA to be licensed.

Matchlists are case sensitive only if you choose Literal String as the matchlist type. The other 2 options allow multiple cases.

Content Filtering is not an effective wasy to block spam. You will have to be constantly changing your rules for current spam. It is much more cost effective to purchase Premium Antispam and let us do that for you. We have a huge probe network and we usually see spam much earlier than you do.

Follow this link to get a free 30-day trial of Premium Antispam. You won't regret it.

http://www.symantec.com/business/products/trialwar...

TSE-JDavis's picture
24
Mar
2010
1 Vote +1
Login to vote

I just noticed your other

I just noticed your other questions about the samples including words that would seem to be for spam detection. Those are just samples and are very old. The fact that it includes "this is not spam" and "unsubscribe" shows that it is not directed towards spam since according to the CAN-SPAM act a message with an unsubscribe link is not considered spam but solicited email.

TSE-JDavis's picture
23
Mar
2010
2 Votes +2
Login to vote

The way you would whitelist

The way you would whitelist someone from a content filtering rule is in the Users tab, you would put the person's email address in the SMTP Addresses list and choose the selection to 'Apply if the sender is NOT in the list"

Yesname's picture
24
Mar
2010
1 Vote -1
Login to vote

I am disappointed, but it

I am disappointed, but it seems this is the only way to whitelisting users.

mailadm01's picture
19
May
2010
0 Votes 0
Login to vote

Does this apply for Version 8.0.2.49 as well?

I have got the same problem (want to exclude som senders from being "Content Filtered").
But I can find no "Users Tab" in my version of Symantec Mail Security for Domino (8.0.2.49).
Where should that be?

Thank you very much in advance.

BenDC's picture
19
May
2010
1 Vote +1
Login to vote

The whitelist for SMSDom is

The whitelist for SMSDom is only for the Premium antispam feature it does not bypass content filtering or AV scanning.

To bypass a content filtering rule you can edit the content filtering rule to be applied conditionally. '

This can be by email address or sender internet domain. Below is an example of bypassing a rule if the sender/author was user@example.com.

jccalvo's picture
29
May
2010
0 Votes 0
Login to vote

Hi BenDC, I've tried this

Hi BenDC, I've tried this option for months in my company and (at least for me) it doesn't work. We don't have anti-Spam, but I supposed that this option could work in content filtering for email messages (executables, with password, etc...), but it doesn't.

Our version is 7.5.4.29

I want only to create a whitelist with the addresses of directors or authorised people to send some kinds of file extensions, and the rest of the company don't, but I have tried everything and I don't find any solution.

Can you give me another idea?

Best regards