Email from a known safe sender flagged as Spam in MSG or PSE

Symptoms

Emails from a specific sender that should have cleared are blocked and flagged as spam.

Diagnosis

The email scores by definition, exceeded the email score threshold. Due to this, the email is blocked automatically.

Solution

You can modify the bulk score for a sender in order to safelist the sender. There are two options to change the bulk score of a sender:

  • Safelisting the sender with the organizational safelist
  • Creating a custom spam rule to adjust the bulk score of the sender's email

Safelist a sender

This option sets the bulk and spam scores of all the emails sent from a specific sender to 0, therefore bypassing the spam module completely.

Note: We recommend this option if you are confident about the integrity of the sender. If the sender is ever compromised, you could potentially receive malicious emails.

  1. Navigate to Email Protection > Spam Detection > Organizational Safe List.
  2. Click Add.
  3. Set the desired settings from the drop-down options.
  4. Click AddEntry.

Create a custom spam rule

This option creates a custom spam rule to adjust the bulk score of emails sent by a specific sender.

  1. Navigate to Email Protection > Spam Detection > Custom Rules.
  2. Click AddRule.
  3. Click AddCondition.
  4. From the drop-down list, select the condition you wish to use, such as Sender Hostname. You will have the same options as when creating an Email Firewall. Click AddCondition once you are done.

    If you wish to apply therule to many senders, you can use Policy Route as the condition.

    • Within the disposition section, select the modify classifier score, set it to bulk and then enter a negative value such as -70.
  5. Under Disposition, select Modify Classifier Score > Bulk from the drop-down options.
  6. Change the value +10 to a negative value such as -70.
  7. Click AddRule.
Pricing & Product Info

For product info and pricing please go to the F-Secure product page

Version history
Revision #:
3 of 3
Last update:
a week ago
Updated by: