Forefront marking email signatures and disclaimer text as spam?
-
Tuesday, September 18, 2012 2:42 PM
For the last few weeks, we have seen a dramatic increase in spam detections - and a dramatic increase in legitimate emails unable to reach us.
From investigation, we have determined that the emails are getting blocked because of email signature or disclaimer text. The problem is that it's not just one or two companies having this issue, it is a lot of companies and the list is growing. We have tested by having them only remove their signature and/or email disclaimer, at which time the exact same email is successful.
Has something occurred recently to cause this issue to accelerate? There does not seem to be any way to manipulate this, or indeed how to determine what words are causing the spam flag (even the spam log on the server only tells me that the message was rejected).
Does anyone have a suggestion for us to work around this? Switching off the spam detection, or throwing everyone who emails us into whitelist is not an option in our case.
PS: I have attempted many times to forward from my gmail to the forefront email as directed in other forums, but no response is received and the same sender keeps failing weeks later..- Edited by Serbiata Tuesday, September 18, 2012 2:45 PM add details
All Replies
-
Wednesday, September 19, 2012 8:04 AMModerator
Hi,
Thank you for the post.
First, you should update FPE to the latest version: http://support.microsoft.com/kb/2619883. And this issue also could be a case of false positives, you may report this to Cloudmark itself as documented on this KB: http://support.microsoft.com/kb/924951/en-us.
Regards,
Nick Gu - MSFT
-
Wednesday, September 19, 2012 10:01 AM
Hi Nick,
Thank you for the reply. I can apply the hotfix, but none of the described issues that it fixes are occurring for us. It also doesn't seem to be available to the Windows Update? It also seems to be restricted delivery, as it wants to email the hotfix to me instead of downloading?
We have been following the KB you mention for reporting false-positives over the last few weeks since the issue started (and still continue to send messages as directed); but we are not getting responses nor does the problem stop occurring. It does make it harder to do properly given the message is completely obliterated instead of moving to the designated spam folder: I have to get the person to send to my gmail, then forward the gmail to my outlook to get the .eml, etc. But we are sending these messages frequently, and we get no response or change.

