none
Many legitimate mail is detected as spam after August 8, 2012

    Question

  • The company has installed forefront protection 2010 for exchange server. In the role of a spam filter using Clodmark Antispam Engine.
    August 8, 2012 to date, a very large number of legitimate mail has been filtered content filter agent " Clodmark Antispam Engine ".
    How can I determine the cause of getting emails in quarantine?
    How can I configure  spam filter so that legitimate emails do not detected as spam?
    Monday, August 13, 2012 11:33 AM

Answers

All replies

  • Hi,

    Thank you for the update.

    It may be False-positive detection by the Cloudmark engine. You may submit the samples message to Cloudmark, as per these articles:

    http://technet.microsoft.com/en-us/library/bb914008.aspx

    http://support.microsoft.com/kb/924951

    Regards,


    Nick Gu - MSFT

    • Marked as answer by AntonZh Thursday, August 16, 2012 6:51 AM
    Tuesday, August 14, 2012 6:13 AM
    Moderator
  • Hi, 

    Thanks for the reply.
    But is there any other solution?

    Tuesday, August 14, 2012 12:57 PM
  • Nick - this is not a solution or answer; since the problem is greater than submitting samples.  Legitimate emails are getting rejected and we're getting spam just fine!!  In our case over 25% of all our customers and over 40% of our legitimate suppliers now, and still counting, are unable to email us directly if they have email signatures.  If they drop their signature, the exact same message, same subject, same sender, etc will be fine.

    It is embarrassing to tell these people that, sorry, our spam engine doesn't like you because you have a telephone number or an email or even a URL (which is pretty normal in 99% of cases) in your email signature.  It's more embarrassing to tell our Sales directors and CxO's that they must create and use gmail for receiving email reliably first time.

    Why can other services like gmail and yahoo determine spam reliably and not treat these same signatures as spam?
    • Edited by Serbiata Friday, October 19, 2012 3:59 PM Added question
    Friday, October 19, 2012 3:56 PM