Re: How to handle false positives when using anti-spam, anti-junk e-mail solutions

From: Tamira Smithson (tsmith_at_rsff.com)
Date: 09/20/04 

Date: Mon, 20 Sep 2004 07:19:59 -0400

Tagging emails is a good way to avoid false positives. However, a better
way is to use a program that sends a report to the end user every day
that tells them which emails are quarantined. This way if a false
positive occurs they only check one message not 100. Use Spam
Marshall(http://www.spammarshall.com), which can change the subject line
as send daily email summary to all users.

Marlon Brown wrote:

> You guys rule. By tagging the potential spam mail with [SPAM] should be a
> nice way. From there do you instruct users how to set filters on Outlook
> client, or you set the a type of SPAM-Folder-Filter from the Exchange server
> side ?
>
>
> "John D" <praetorian7x-news@yahoo.com> w
> rote in message news:S76dnb3uzN4hZdTcRVn-tg@giganews.com...
>
>>I don't have GFI delete the item, I've been letting the mail go through to
>>the user to a SPAM folder, or to add [SPAM] to the subject line so they
>
> can
>
>>do some of the filtering "for me".
>>
>>If they get a false positive, I've istructed them to forward it to me and
>
> I
>
>>whitelist the sender.
>>
>>I also have their anti-virus software, which I have set to delete, and
>>reduces most of the quarantining I have to manage.
>>
>>--
>>John Dotson
>>praetorian7x-news@yahoo.com
>>"Marlon Brown" <marlon_brown@hotmail.com> wrote in message
>>news:#x9AIWBnEHA.2216@TK2MSFTNGP10.phx.gbl...
>>
>>>I have purchased GFI MailEssentiasl10 and so far that seems to be
>
> working
>
>>>fine.
>>>
>>>I think false positives will happen especially in the begnning of our
>>>implementation, and I would like to confirm what's the best way to
>
> handle
>
>>>that. What I am doing here is that I asked management to designate an
>>>assistant that should read on the e-mails caught by the junk filter and
>>>notify recipient in case she suspects that is a false positive. Any
>
> other
>
>>>ideas ?
>>>
>>>
>>
>>
>
>

Relevant Pages

  • Re: Recommendations on Front end mail secuity
    ... Many of the commercial antispam solutions have this at ... I went from sybari antispam catching 35,000 emails a week with ... week with less than 10 false positives. ...
    (microsoft.public.exchange.admin)
  • Re: Content Filtering Statistics. What to expect?
    ... > Here's an example, we receive on average about 500,000 emails per ... As long as you explain how the technology works, ... > spam and we block 28% I can reasonably assume we're doing a good job ... examining the false positives and negatives, and showing that while rule ...
    (comp.security.misc)
  • Re: [opensuse] search for word in huge txt file
    ... how you guys handle old emails? ... by my ISP's SpamAssassin (they have more false positives than false ... Everything else has its own mailbox. ... personal hierarchy and a professional hierarchy and one for my ...
    (SuSE)
  • Re: Take a look at this security package from the MS Corporation
    ... I have seen a leap in spam similar ... maybe half a dozen false positives ... > This system was able to keep up with the Swen flood at its peak, ... emails or are determined to protect your spam. ...
    (comp.os.linux.networking)
  • quarantineing a email in exchange 2003
    ... Im in the need of quarantining a copy of all emails to domain XYZ In ... Exchange 2003. ... Can I get a copy of all emails to domain XYZ with out ...
    (microsoft.public.exchange.admin)