Spam getting through

There will always be opinions, both good and bad on how MagicSpam protection, rules and policies are used, and what the defaults should be. Different environments may have different needs. We try to find the perfect balance, and that is not always easy. Just remember that we have to satisfy millions of users.. not just one person.

Moderators: wizard, magicspam

Post Reply
dvault_chris
Posts: 1
Joined: Tue Nov 07, 2017 11:07 am

Spam getting through

Post by dvault_chris » Tue Nov 07, 2017 11:11 am

Hello

We have just installed MagicSpam Pro on our Centos OS server running WHM/CPanel.

We have afair amount of spam which is getting through. Can you suggest some changes to the MagicSpam settings which will fix this?

Many thanks


Example logs:
Mua IP Address Hostname Helo Sender
no 74.6.133.124 sonic313-14.consmr.mail.bf2.yahoo.com sonic313-14.consmr.mail.bf2.yahoo.com ihoge@yahoo.com
no 40.92.0.105 mail-oln040092000105.outbound.protection.outlook.com NAM01-BN3-obe.outbound.protection.outlook.com sausagemom@msn.com
no 173.224.161.143 lvs-ipout-01-data1.paypalcorp.com lvs-ipout-01-data1.paypalcorp.com ppkanaeu-intlsp-spoof@paypal.com
no 139.162.194.9 mx.bitcoin-hub.xyz mx.bitcoin-hub.xyz brett-626@bitcoin-hub.xyz
no 121.201.127.141 (null) server1.yawza.top info1@mkbalance.top
no 167.89.82.160 o4.e.notification.intuit.com o4.e.notification.intuit.com bounces+2327135-496a-sales=adhectic.co.uk@e.notification.intuit.com
no 202.147.196.34 ip-196-34.infokom.net ip-196-34.infokom.net c97f6853@epicon.com.hk
no 41.59.27.35 35.27-59-41.dsm-zone-1.ttcldata.net 35.27-59-41.dsm-zone-1.ttcldata.net siseldd@striker.ottawa.on.ca
no 188.120.168.197 h188-120-168-197.cust.se.alltele.net h188-120-168-197.cust.se.alltele.net kc225.lee@samsungsvc.co.kr
no 113.160.203.81 static.vnpt.vn static.vnpt.vn darkernn@striker.ottawa.on.ca
no 200.188.148.178 cablelink-200-188-148-178.hosts.cablevision.com.mx CableLink-200-188-148-178.Hosts.Cablevision.com.mx kelly@ebara.com.tw
no 190.176.242.220 190-176-242-220.speedy.com.ar 190-176-242-220.speedy.com.ar tyyz@essence.com.sg
no 122.174.232.148 abts-tn-dynamic-148.232.174.122.airtelbroadband.in abts-tn-dynamic-148.232.174.122.airtelbroadband.in hhannahud@excite.it

magicspam
Posts: 1553
Joined: Tue Oct 28, 2008 2:27 pm

Re: Spam getting through

Post by magicspam » Wed Nov 08, 2017 12:40 pm

Hello dvault_chris,

Thank you for your post.

It would be very helpful if you could send us the complete MagicSpam logs for examination to better assist you with the uncaught spam issue on your system. To retrieve MagicSpam logs, you can use the MagicSpam interface and access the "Logs" tab.

In the log search result output, you have the option to export/save the log search results to a CSV file. Please Email the CSV file as an attachment to us at:

support@magicspam.com

Please also make sure that you remove entries where mua=yes and highlight only HAM entries that are spam.

Also, can you please send us screenshots of the following two tabs in your MagicSpam control panel:

* Settings / Server Policies
* Settings / IP Reputation

This additional information will help us better understand the nature of the uncaught spam you are receiving, and will assist us in making suggestions for how to improve your filtering.

Also please note that with the latest version of MagicSpam you can easily see what policies would block those uncaught spam messages with the "Replay" feature. Simply find the log for the uncaught spam messages from the "Log Search" under the MagicSpam 'Logs' tab, click on the "HAM" link and then click on 'How can I block this message'.

We hope this information helps.
-- MagicSpam Support Team --

Post Reply

Return to “Discussions on Spam Protection Policies and Default Rules”

Who is online

Users browsing this forum: No registered users and 17 guests