Follow

SpamAssassin: Frequently Asked Questions

FAQ - Refer below to common questions about Redtail's Anti-spam solution:

 

 
How does email filtering work?

 

 
Redtail's Spam solution analyzes incoming email messages and assign them each a spam score based upon known "spam" attributes. These attributes can range from certain key words and phrases to known malicious attachment types.

 

Below is a look at how the solution reviews your email:

When mail is received, the sender's address is checked against a number of lists of known spammers and the message is immediately rejected if the sending address is on one of these lists.After passing the first check, the message is then scanned for information commonly found in spam and scored based on the findings.

Depending on the magnitude of the score, the message can be delivered normally if the score is very low. A message with a slightly higher score can be delivered and placed in the junk folder with the ***SPAM*** text added to the subject line. Messages with very high spam scores are quarantined and/or deleted.

 

Related Documentation - SpamAssassin: Overview



What is the Quarantine?

The Quarantine is a location on the server where email messages are stored temporarily because they might contain spam, a virus, or inappropriate content. If the message is infected with a virus, the virus is removed. Quarantined mail is held for 96 hours. Users can request to have a Quarantine digest enabled for their mailbox so they can monitor and review mail sent to their address that has been placed in the quarantine.

You can release messages from the Quarantine if you determine that they are not spam. To do this, simply click on the Message Id number (the last column) you wish to be delivered. Messages that are not released from the Quarantine are automatically deleted after the 96 hour period. You cannot see what is in quarantine or release messages until you have received a digest.

To prevent emails sent by specific senders from being quarantined, we suggest you add the email address of the sender to your Allowed list within Redtail's web client. 

 
What is an End User Digest?

If email messages addressed to you were sent to the Quarantine, you will receive an email notification, called an End User Digest (or Digest), in your mail box with the subject of Daily Quarantine Summary from quarantine@redtailtechnology.com. The Digest provides you with a list of the messages addressed to you that have been placed in Quarantine. You can review the message's subject and sender to determine their content and as a result what actions you want to apply to the messages.

You can release messages from the Quarantine if you determine that they are not spam. To do this, simply click on the Message Id number (the last column) you wish to be delivered. Messages that are not released from the Quarantine are automatically deleted after the 96 hour period. You cannot see what is in quarantine or release messages until you have received a digest.

To prevent emails sent by specific senders from being quarantined, we suggest you add the email address of the sender to your Allowed list within Redtail's web client. 

We can adjust the frequency of the digest based on your specific needs. To change the frequency, simply contact Redtail Support at support@redtailtechnology.com and choose one of the following frequencies: 

  • Once a Day
  • Twice a Day
  • Every Hour
  • Every 2 Hours
  • Every 3 Hours
  • Every 4 Hours
  • Every 6 Hours
  • Every 8 Hours

  

What do the fields in the Digest mean?

There are various fields within a digest. Here is a brief explanation for each:

# : This is the message number you will use to request a release from the quarantine.

Date : This column represents the date the message was received by Redtail's servers

Sender : This column lists the sender's email address.

Subject : This column lists the subject of the message received.
 
Content : This column lists the content that was found within the message which lead to it being quarantined. Below is the Content Legend that is present within the digest. 
 

Content Legend with explanations:

 S  Level 1 Spam

  Level 1 Spam is a result of a message having a particular score threshold (Example: Scores between 8.01 - 9.00) Note: This varies based on settings.

 s   Level 2 Spam  
  Level 2 Spam is a result of a message having a particular score threshold that is higher than Level 1 (Example: Scores between 9.01 or higher) Note: This varies based on settings.
 
 B   Banned Filetype 

  Banned Filetype is a result of a message having a banned file type included within it. (Example: .exe, .pif, .com, etc.)

 V   Virus

  Virus is a result of a message having contained an identified virus.

 M   Bad MIME

  Bad MIME is the result of a message having contained bad MIME encoding in the header

 H   Bad Header

  Bad Header is the result of a message having contained an invalid header outside of RFC 822 standards

 
Score : This column lists the score the message received as a result of being scanned.
 
ID :  This column lists the message's unique ID within the quarantine. 
 
 
 
Why haven't I received a digest?
 

If you are not receive a digest, please contact Redtail Support by email at support@redtailtechnology.com or by phone at 1.800.206.5030, option 3 for Support.

 
Why would I want to release a message from the Quarantine?

Sometimes, Redtail's spam solution designates a message as spam even though it's a legitimate email. If you decide you want to read the message, you can request it be released. Releasing the message removes it from the Quarantine and delivers it to your mail box.

For example, you may be on a mailing list that sends you notices on deals. You want to receive these notices, but Redtail's spam solution scans the message, scores these messages as spam and sends them to the Quarantine. When you look at your Digest, you will see that these are messages that you indeed want delivered to your mail box.

It is recommended that you add the sender to your Allowed list to prevent future messages from going to the quarantine.
 
 
What happens to my messages in the Quarantine?

If you do not release a message from the Quarantine, it will automatically be deleted after 96 hours. So if you look at the messages in your Digest, and determine that all of them are spam, you do not need to do anything. The messages will automatically be deleted from the Quarantine.


What is an Allowed Senders and Blocked Senders list?

All users have access to a customizable Allowed senders list within your Redtail webmail client. You, the user, control your personal Allowed senders list to which you can add the addresses of people, organizations, and mailing lists from which you do want to receive mail. If a sender's address is included in the Allowed senders list, messages are filtered for a virus or inappropriate content, but not for spam.

All users have access to a customizable Blocked senders list within your Redtail webmail client in which you can control your personal Blocked senders list. This list allows you to add addresses of people, organizations, and mailing lists from which you do not want to receive “junk email.” The email administrator controls the Global Blocked Senders List, which applies to everyone in the organization.

If a sender's address is included in the Blocked senders list
, messages from the address will be deleted and not delivered. 
 
Related Documentation- Webmail: Managing Junk Folder


What is a false positive?

A false positive is an email incorrectly identified as spam. If an email message is scored as spam and sent to the Quarantine, but it really is a legitimate message from a legitimate sender, you can report it as a false positive. 
If you receive an email that you are questioning why it has been placed within the Junk mail folder, or you have reports of an email not being received from a sender, please feel free to contact us at spam.inquiry@redtailtechnology.com

 

 

What is a false negative?

A false negative is an email incorrectly identified as not spam. An email message that is incorrectly delivered to your mail box because it was not identified as spam can be reported as a false negative. For these particular messages, you can place these messages within the Junk folder to train the filter going forward. You also have the ability to add the sender to the Blocked senders list to prevent mail from this source going forward. 

Spammers are very clever and are always honing their craft to find ways to trick products' anti-spam solutions into delivering spam to your mailbox. Redtail's spam solution is frequently updated throughout each day in an attempt to stay one step ahead of the those pesky spammers.

 

Was this article helpful?
2 out of 2 found this helpful
Have more questions? Submit a request

Comments

Powered by Zendesk