[SOLVED] Some Messages bypass filters

Discussion forum for Enterprise Edition.
Post Reply
infoal
Posts: 13
Joined: Thu Mar 19, 2009 9:46 pm

[SOLVED] Some Messages bypass filters

Post by infoal » Mon Feb 02, 2015 7:04 pm

Hi, I'm on evaluation period with Enterprise 8.56,
This is a production environment with 100 domains and 1500 account.
Sometimes, some messages simply bypass the filtering system.
I've some filters, and the fist one is applyed for all messages processed. This filter add a header to all messages.
10% of messages aprox, are processed and delivered correctly, but filters are not applied. The header is not there. There is no record in MTA-Filters logfile, and nothig strange in Activity and Dedug logs, simply the filters are not applied.

Tried:
- The sender IP are not on the whitelists
- There are no Antivirus activated
- No spamaassin
- No external scripts
- only your bayesian and internal spam detection

What can I try? Any idea?

Thanks.
Last edited by infoal on Mon Mar 16, 2015 10:36 am, edited 1 time in total.

aahq
Posts: 183
Joined: Sat Aug 07, 2010 11:08 am

Re: Some Messages bypass filters

Post by aahq » Tue Feb 03, 2015 9:19 am

If first filter is "add a header" and its not there on all messages then that's a bug...

Do you have an MTA pickup event?

Do you have Realtime Anti Virus software of any description running on the machine? This may be catching them before they go to the queue?

I have to admit that for the past 2 sub versions I have seen some of this type of thing but only maybe 1% incorrect...

Try moving to 8.58? I have done it and it appears safe...

Scott

infoal
Posts: 13
Joined: Thu Mar 19, 2009 9:46 pm

Re: Some Messages bypass filters

Post by infoal » Tue Feb 03, 2015 1:52 pm

No Antivirus, no Pickupevent, everything is disabled.
This week i will update to the new version, and i will ask if it works.
thanks!

infoal
Posts: 13
Joined: Thu Mar 19, 2009 9:46 pm

Re: Some Messages bypass filters

Post by infoal » Mon Mar 16, 2015 10:35 am

i can confirm that update to 8.58 solve the problem. Thanks!

aahq
Posts: 183
Joined: Sat Aug 07, 2010 11:08 am

Re: [SOLVED] Some Messages bypass filters

Post by aahq » Tue Mar 17, 2015 10:54 am

Cool. If in doubt upgrade :)

keith@vfsremote.com
Posts: 25
Joined: Fri Mar 20, 2015 7:53 pm

Re: [SOLVED] Some Messages bypass filters

Post by keith@vfsremote.com » Wed Jun 17, 2015 3:54 pm

*bump* I am on 8.6 and experiencing this problem.
Keith Damron
Manager of Customer Support

VisionFriendly.com
1245 E. Diehl Road, Suite 307
Naperville, IL 60563
630 553-0000 x112
Keith@visionfriendly.com

aahq
Posts: 183
Joined: Sat Aug 07, 2010 11:08 am

Re: [SOLVED] Some Messages bypass filters

Post by aahq » Sat Jun 20, 2015 3:03 am

In some cases I think it is not your imagination. I see it too but I think it < 1% of messages. I can see they are marked up even in headers and RE but still pass the filter without taking the actions.

On each filter, if there is any action performed I add something like <filter name>=1 to the header to make diagnosis more easy.

I will be moving up to 9.x shortly. I am hoping this fixes it.

I am lucky that the management here recognise the low cost vs the gigantic amount of uptime and minimal issues. I can understand in some places that this would be a big time issue with customers.

Hope this helps.


Scott

Post Reply