| Why are these blatant spam messages making it through Postini | JeremyRWhittaker | 7/15/12 5:36 PM | All, I have a client who in the last 3 weeks started getting a ton of spam messages delivered. I have ran the Postini spam tool and the results are below. When I log in to his Postini his overall junk filter is set for "strict" which I believe is t |
| Re: Why are these blatant spam messages making it through Postini | JeremyRWhittaker | 7/16/12 8:35 AM | More messages are making it through today. How can I contact Postini to gain assistance with this as my client is on the verge of cancelling? |
| Re: Why are these blatant spam messages making it through Postini | JeremyRWhittaker | 7/16/12 8:36 AM | And yet another... |
| Re: Why are these blatant spam messages making it through Postini | FrankM TC/Reseller | 7/16/12 8:52 AM | When users settings are not available, it's most likely sent BCC. As for the others, there is a new strain of cleverly crafted messages that are given spam filters some challenges, including exploiting SPF/DKIM filters. |
| Re: Why are these blatant spam messages making it through Postini | JeremyRWhittaker | 7/16/12 9:01 AM | Only in my last post the user settings were not available because there was more than one recipient to this message. Whenever there is more than one recipient Postini cannot show the user settings because there is more than one. I'm still trying to |
| Re: Why are these blatant spam messages making it through Postini | JeremyRWhittaker | 7/16/12 9:05 AM | for instance this message is obvious spam. How is it possibly getting through? |
| Re: Why are these blatant spam messages making it through Postini | FrankM TC/Reseller | 7/16/12 11:06 AM | The http://intuit.com domain is/may being spoofed. SPF filtering, either on your server or using Postini's SPF, would have at least quarantined the message if the SPF TXT records were not correct. I did not see the IP 84.109.36.123, listed in the Intuit SPF |
| Re: Why are these blatant spam messages making it through Postini | JeremyRWhittaker | 7/16/12 11:26 AM | The Postini spam score on this latest one is .16 and it still made it through! Something has got to be wrong here! How can I contact Postini to have them help me with this? |
| Re: Why are these blatant spam messages making it through Postini | FrankM TC/Reseller | 7/16/12 11:38 AM | Just hold tight, Postini is aware of the outbreak. As for unknown recipients, the filters can not be applied unless the users settings are known. Use SPF and you should see a reduced rate of these spoofs. A recent response from support, based from o |
| Re: Why are these blatant spam messages making it through Postini | JeremyRWhittaker | 7/16/12 11:48 AM | So I think I understand the problem now. If the message is addressed to more than 2 members of my organization Postini does not know which users policies to apply to the message therefore it just makes it through?! I need to contact Postini to fix |
| Re: Why are these blatant spam messages making it through Postini | FrankM TC/Reseller | 7/16/12 2:44 PM | Do they know, yes they do. The X-pstn-settings field is not available in a message that was delivered to multiple (envelope) recipients. However, if the sending mail server establishes a separate connection for each recipient, then an individual reci |
| Re: Why are these blatant spam messages making it through Postini | JeremyRWhittaker | 7/16/12 10:10 PM | You're talking about changing the SPF settings within Postini? Where is that done? |
| Re: Why are these blatant spam messages making it through Postini | FrankM TC/Reseller | 7/16/12 10:16 PM | The settings are in the email config level, RPF/SPF sections. |
| Re: Why are these blatant spam messages making it through Postini | JeremyRWhittaker | 7/16/12 10:25 PM | Ah, I see now I can enabled SPF check. This should help cut down on some of this email. So you can confirm that Postini knows about the issues I addressed above and is working on them? |
| Re: Why are these blatant spam messages making it through Postini | FrankM TC/Reseller | 7/17/12 5:31 AM | Yes, they are aware of the increased spam. This is what we received from our reseller support case. Hello Frank, Thank you for contacting Google Enterprise Support. I've taken the sample you provided and escalated them to our engineering team. It |
| Re: Why are these blatant spam messages making it through Postini | JeremyRWhittaker | 7/17/12 8:33 AM | Thanks for the reply Frank. When did they send that message? I received another spam message today which is obvious spam but rated a very high score with Postini so it passed. |
| Re: Why are these blatant spam messages making it through Postini | JeremyRWhittaker | 7/17/12 8:34 AM | Again another one. |
| Re: Why are these blatant spam messages making it through Postini | FrankM TC/Reseller | 7/17/12 9:02 AM | Yesterday. However, you have multiple issues to address, especially SPF filtering. You may try setting SPF to Hard Fail, as hard fails for neutral should be treated as having no SPF. See Sender Policy Framework (SPF) 2.5.2 |