Is SM spam filtering actually working??

Problem reported by Brian Bjerring-Jensen - VonBjerring GmbH - 2/27/2026 at 3:26 AM

Submitted

I have created this.

Despite that i get this....

Message-ID: <10204800U25153881Q86843312D85814360I@id.obcatmt.loms.jambyl.su>
From: "Purisaki Berberine Patch" <obcatmt@loms.jambyl.su>
To: <kontakt@champagniet.dk>
Subject: Tyndt plaster mod fedt og overspisning.
Date: Fri, 27 Feb 2026 01:51:58 +0200
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_0018_01DCA788.96B35C00"

I simply dont get why I still get these in my inbox....and not in my junk email folder.

3 Replies

Reply to Thread

J. LaDow Replied

2/27/2026 at 5:37 AM

We noticed lately that on a couple rules we had "Contains" as the method, that we had to remove our wildcards from the keywords - then they started working again.

Ours were using wildcard * on several top-level domain names - and they stopped detecting - but removing the asterisk got at least those two rules working again. We haven't tested it further but something definitely seems to have changed.

We also scan the FROM header a LOT because of the "brand spoofing" that's going on - stuff like c0stc0 and all that garbage that's been making the rounds. It sucks that OVH is basically non-responsive to abuse complaints. We've blocked like 4 other ASNs and slowed that stuff down, but thanks to DigitalOcean and OVH we can't completely kill it.

MailEnable survivor / convert --

terry fairbrother Replied

2/27/2026 at 5:56 AM

I found the cryren anti spam to be hit and miss and raised a ticket. To be fair SM support are helping me. RspamD is also doing a great job marking the obvious ones with high rating and I have a rule (filter) that redirects those to me for checking.

In the mean time I have been building custom content filters and so far has been keeping the 'ones that got past' out of the end users mailbox. Mines...

Body being the words, phrases, some with wildcards and the 'anywhere' are the a copy of the trusted senders or allowed emails. Yes, it takes a lot of time to set up, but the costco / amex / marriot etc have not touched the end users. The action is to forward to me for any false positives or to refine the filters

In addition, I have custom rules under spam checks which adds a heavy weight too

All the above works for me as this is a small SME and it might not scale to multiple domains and 1000's users, but offered as a suggestion. Also, the server has been live for a week so early days of training filters too.

J. LaDow Replied

2/27/2026 at 6:32 AM

We have setup several rules like yours @terry with heavy weights - just so they auto-delete. Some of the obvious stuff. Our highest "Filtering" group deletes instead of holds. We also block hundreds of EHLO strings or email address parts from even connecting... One of our bigger problems is providers who don't acknowledge abuse reports...

MailEnable survivor / convert --

Back to Community Threads

Please leave this box unchecked

Reply to Thread

Enter the verification text