McAfee Secure Messaging Service / Postini: false positive?

Posted by Martin on Server Fault See other posts from Server Fault or by Martin
Published on 2009-08-21T10:27:15Z Indexed on 2010/03/11 4:41 UTC
Read the original article Hit count: 419

Filed under:
|

Hello,

I'm puzzled by this email message that gets quarantined by McAfee Secure Messaging Service (it's based on Postini) for no reason that I can think of.

Here are the Postini headers:

X-pstn-2strike: clear
X-pstn-neptune: 0/0/0.00/0
X-pstn-levels: (S: 0.02932/98.63596 CV:99.9000 FC:95.5390 LC:95.5390 R:95.9108 P:95.9108 M:97.0282 C:98.6951 )
X-pstn-settings: 3 (1.0000:1.0000) s cv gt3 gt2 gt1 r p m c
X-pstn-addresses: from [db-null]
X-pstn-disposition: quarantine

I read the docs (http://www.mcafee-sms.com/webdocs/admin%5Fee%5Fmcafee/wwhelp/wwhimpl/common/html/wwhelp.htm?context=MACAFFHelp&file=header%5Foverview.html#951634) and in short, the x-pstn-settings header tells me that NONE of the filters was triggered, but the x-pstn-levels header tells me that the final score (0.02932) is low enough to classify the email as bulk/spam.

Can anyone explain to me why the final score is so low when none of the filters were triggered?

Does anyone have any suggestions on how to prevent this from happening?

Regards, Martin

© Server Fault or respective owner

Related posts about smtp

Related posts about spam-filter