Suggestion: Better detection of spam/phishing e-mail
-
In response to the post above about suggestions, I have one that is unfortunately sort of vague: I wish SecurityGateway was better at learning to recognize obvious spam/phishing e-mail dyamically. I used to use GFI MailEssentials and one thing I can say for certain is that their onboard analysis engines were much better at reacting to new spam/phishing threats. Even though I have enabled automatic learning, I don't see that it actually happens when I look at the logs in SecurityGateway. Also, we get lots of very obvious phishing mail that gets through even though we are using Spamhaus DQS and Abusix. DNS Blacklists are great but it would be even better if SecurityGateway had something more impressive than SpamAssasin for performing onboard analysis.
-
Can we get a copy of some of the messages, including headers, along with inbound logs that shows SecurityGateway accepting and processing the mail?
If you can share the information, please upload it to https://mdaemon.sharefile.com/r-rc3922c1eed334d4dbf5e34f0bd04ccd6 and let us know the name of the file you uploaded.