Global spam filter
cPanel's global filters' "Fail With Message" option has reduced unwanted e-mail significantly because it seems that mere deletion of unsolicited correspondence accomplishes less than short replies which might be taken as an order but say no more than "This account rejects spam." Please, is that reasoning correct? Or would you recommend another strategy against unwanted mail?
That said, I have found recently that some filters, in particular those specifying senders from ".sa.com" and ".za.com" are not working and propaganda from those sources continues. Please, what do you advise?
-
Hey there! Yes, that sounds correct to me, and "fail with message" is the first option in the failure list for just that reason.
I'd need a bit more detail about the second half of your request in order to provide a potential solution. Can you let me know more about how you have configured the filters? Can you also see if it shows those messages are being filtered by Exim in the /var/log/exim_mainlog file?
0 -
Thank you very much, cPRex, for your welcome comments. Some folks have questioned the return message strategy so it is particularly encouraging to read:
> Yes, that sounds correct to me, and "fail with message" is the first option in the failure list for just that reason.
Are you actually agreeing that that "fail" method is more spam-deterrent than mere deletion? If so, very good. That said, the domain hosts, InMotion, recommended two strategies, first "Stop processing Rules" - unsure what that does - and then "Fail With Message". I hope you agree.
> I'd need a bit more detail about the second half of your request in order to provide a potential solution.
A plethora of spurious or suspect health pitches has arrived from sources like Hearing Noises? <contact@ranchcolon.sa.com>, Water Trick <reply@yogadetox.za.com> and <memorybreakthrough@learnpublicity.sa.com>. So I have specified "From" and "contains" those 5-letter suffixes in my filter list.
> Can you let me know more about how you have configured the filters?
I hope the above provides the requested detail.
> Can you also see if it shows those messages are being filtered by Exim in the /var/log/exim_mainlog file?
Wow, apologies. But I have no clue about this. Should I ask InMotion Support?
Again, many thanks.0 -
Yes, the "fail" method seems to be the best solution for most users.
Thanks for the details on that. I would expect the filter to work with "from" and "contains" for what you describe, so I would have InMotion check those logs to see why the filters aren't being applied to the messages.
0 -
Thank you for the follow-up note although why the "fail" method is best remains unclear. Nothing about "Stop Processing Rules" either.
As you advise, I shall consult InMotion next about why the filters aren't performing.
0 -
There's a ton of discussion online about the merits of each. I've just always had the best experience with "fail" but I'm hesitant to say anything is the "best" for all situations.
0 -
My thanks again, cPRex. So the matter is complicated. May add more when/if InMotion replies.
1
Please sign in to leave a comment.
Comments
6 comments