Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
services:e-mail_service:antispam_feedback [2011/03/21 16:01]
marina
services:e-mail_service:antispam_feedback [2021/12/09 12:44]
giunta removed
Line 1: Line 1:
 ====== Anti-Spam Feedback ====== ====== Anti-Spam Feedback ======
  
-**To improve the spam filters we need a feedback by the users.**\\ +To improve the spam filters we need a feedback by the users.\\ 
-**False positives** are legitimate e-mail messages that are mistakenly blocked or tagged as spam by the anti-spam filter . \\ +  ​* ​**False positives** are legitimate e-mail messages that are mistakenly blocked or tagged as spam by the anti-spam filter .  
-On the other hand there are e-mails (**//false negatives//**) that pass the anti-spam filters and arrives on the users' inbox, but they are spam.+  ​* ​On the other hand there are e-mails (**false negatives**) that pass the anti-spam filters and arrives on the users' inbox, but they are spam. 
 ---- ----
  
-Our internal ​anti-spam [[antispam_filters#​barracuda_spam_firewall|Barracuda Spam Firewall]] assigns to every incoming mail **a spam score value**. +Our anti-spam ​is the one by [[http://​www.spin.it/​|SPIN]]. It assigns to every incoming mail **a spam score value**.
-E-mails with values higher than 3.5 are probably SPAM messages and the anti-spam tags their __subject line__ ​ with the identifier //**[Maybe SPAM]**// ​+
  
-**Only the e-mails** ​ with very-very-high spam score (**spam score over 9 points) are blocked by the Barracuda Spam Firewall**. \\ 
-**The others --//allowed or tagged as probably spam//-- are delivered to the final user. 
-**\\ 
  
 +**Only e-mails with very-very-high spam score are blocked**. \\
 +The others are delivered to the final user.
 +\\
  
-  ​See here about [[webmail-horde:​filter:​spam-level| how to manage my e-mail spam filters using HORDE ]]. +/** inizio commento 
-  ​* ​See here about [[webmail-squirrel:​filter:​spam-level| how to manage my e-mail spam filters using SQUIRRELMAIL ]]. +See here about [[webmail-squirrel:​filter:​spam-level| how to manage my e-mail spam filters using SQUIRRELMAIL ]]. 
-  * See here for [[services:​e-mail_service:​Some-definitions|some useful answers]] to questions about spam.+fine commento */ 
 +  * See at the end of this page about some useful answers to questions about spam.
 \\ \\
 ---- ----
Line 28: Line 29:
  
 When you find a:\\ When you find a:\\
-  * **false positive** --mail tagged as SPAM or "[Maybe-SPAM]"-- which is NOT a real spam +  * **false positive** --mail tagged as **[SPAM]** or **[Maybe-SPAM]** -- **which is NOT a real spam** 
 or\\ or\\
-  * **a spam** mail without ​"[Maybe-SPAM]" ​in the subject, +  * **a spam** mail** without [Maybe-SPAM]** in the subject, 
-please forward it, with its complete header, to [[spam@sissa.it]] specifying ​ in the //subject// if it is:\\ +**please forward it, in attachment, to [[spam@sissa.it]]** **specifying ​ in the //​subject ​line//** if it is: a **FALSE POSITIVE** or a **SPAM**.
-a **FALSE POSITIVE** or a **SPAM**.+
  
-The operators take the notifications and update the filters.+The SPIN operators take the notifications and update the filters.
  
-The COMPLETE headers are needed because ​they contain ​the information about the real sender and the e-mail delivery.  +The attachment is needed because ​it contains ALL the information about the real sender and the e-mail delivery. ​
-We will take the notifications and update the filters, in order to make the filtering better.+
 \\ \\
-You find here a [[services:​e-mail_service:​header-example|typical ​header example]].+You can find a [[services:​e-mail_service:​header-example|header example ​on the page: typical header]].
 \\ \\
-You find below some instructions to correctly send us the complete header.+You find below some instructions to correctly send us the attachment.
  
  
-=== Using PINE to send us the complete ​e-mail ​header ​====+=== Using Thunderbird ​to send us the e-mail ​in attachment ​====
  
-You must enter/​exit ​the //header mode// with the key **H**.  +Open the message and then select ​the menu **Message** --> **Forward As** --> **Attachment** 
-When you enter the header mode The program shows at the bottom of the screen the [Display of full headers is now off.] or [Display of full headers is now on.] +Now you can send your e-mail.
-Now you can forward us your e-mail. ​+
 \\ \\
  
-=== Using Thunderbird ​to send us the complete e-mail header ​====+----  
 + 
 +===== Some Useful Answers ​to SPAM Questions ​====
 + 
 +**What are false positives?​**\\ 
 +False positives are legitimate e-mail messages that are mistakenly rejected or filtered by a spam filter.
  
-Open the message and then select the menu **//​View//​** --> **//​Headers//​** --> **//​All//​**:​ you will see on the message window the complete headers of the messages. 
-Now you can forward us your e-mail. 
 \\ \\
 +
 +**Will I get false positive?​**\\
 +Yes: for any false positives the sender will receive a bounce message
 +indicating the email did not go through. ​
 +Your notification to [[spam@sissa.it]] of the false positive allows us to train the Bayesian filters and
 +further reduce the occurrence of false positives.
 +
 +\\
 +
 +**What is Spam scoring, and the Bayesian Analysis?​**\\
 +  * Spam scoring is the rules based system (about 4000 rules) that looks for characteristics in the email. The Spam scores are used to determine what to do with the email. They do not contribute directly to the future analysis. The rules are updated via the Updates Subscription that we maintain on Barracuda.
 +  * Bayesian analysis, also contributes to the Spam scoring. This is done using your notifications,​ so that we can flag some messages as either SPAM, or NOT SPAM in the message log.
 +
 +\\
 +
 +**How Can I find out if an email that I am missing was blocked by Barracuda?​**\\
 +You find in the Junk folder the e-mails stopped by Barracuda because of spam. You receive an e-mail notification concerning e-mails stopped because of viruses.
 +In case you have more questions you can contact the [[helpdesk@sissa.it|ITCS Helpdesk]] and we will check the message log for you.
 +
 +