Email and Server Security - How to submit false positive/negative email - F-Secure Community
<main> <article class="userContent"> <h3 data-version="11" data-article="000008306" data-id="issue">Issue:</h3> <p>I have several emails being incorrectly classified by the F-Secure Spam Scanner, how can I submit a sample of the emails to F-Secure for investigation?</p> <h3 data-id="resolution">Resolution:</h3> <p>If your email messages were incorrectly classified by our Email and Server Security spam scanner, we would like to receive an original copy of the email sample.<br><br>It is crucial for us to have copy of the original message sample, so that developer could analyze the full mail hader and do the necessary action to blocked unwanted spam email. <br><br><b>NOTE:</b> Do not edit the original message in any way for meaningful analysis.<br><br>Compress the message sample to a .zip format and set a password as below.<br></p><pre class="code codeBlock" spellcheck="false" tabindex="0"><br>infected</pre> Do note that the copy must be sent to the right channel, otherwise, it is rejected by our automated systems.<br><br>1. Create a new message and address it to: <ul><li>for spam messages which the spam scanner failed to filter.</li></ul><pre class="code codeBlock" spellcheck="false" tabindex="0"><br>spam-samples@email-samples.f-secure.com</pre> <ul><li>for legitimate, non-spam messages which were accidentally filtered as spam.</li></ul><pre class="code codeBlock" spellcheck="false" tabindex="0"><br>ham-samples@email-samples.f-secure.com</pre> <ul><li>for spam that attempts to trick the recipient into disclosing personal, private, or sensitive information (e.g., online banking password).</li></ul><pre class="code codeBlock" spellcheck="false" tabindex="0"><br>phishing-samples@email-samples.f-secure.com</pre> <br><br>2. Add the spam sample as an attachment (multiple samples of the same type can be sent in a single submission). <ul><li>In Microsoft Outlook, drag the sample from your inbox into the composition pane so they appear as an attachment in the new message.</li><li>In other email programs, refer to the product documentation for instructions on how to obtain the full header of an email message using your email program.</li></ul><b>Important! </b>The sample should be submitted with its <b>full header</b>, and if possible, in the <b>message / RFC822 format</b>. For meaningful analysis, <b>do not edit</b> the original message in any way.<br><br>3. In the message, provide the name of the F-Secure product used and its version number<br>4. Submit the sample from a valid, live email address. In rare cases, we may need to reply to you if we have questions. <p>Article no: 000008306</p> </article> </main>