How to deal with spam that bypasses the antispam filters

IceWarp has advanced built-in antispam technology that uses multiple spam detection layers to differentiate between genuine emails and spam. When a mail undergoes a spam check, each layer assigns it a spam score of up to 10, depending on the results of the check. Based on the total score, the IceWarp server decides whether to move the email to spam, quarantine or deliver it to the user. You can customize how the server handles the emails by adjusting the spam score value for each action. To do this, go to Remote Console -> Anti-Spam -> Action.

Every time the message is evaluated, IceWarp creates Antispam logs. The logs help you understand the reason behind every action of the server. There, you can see the score the email receives from different spam detection layers: SpamAssassin, Antispam Live, Black & White list, Greylisting, Bayesian, learning rules and others. 

To set the logs to Extended:

1. Go to Remote Console -> System -> Services.
2. Click Anti-Spam and select Extended from the dropdown.

If a mail was sent to spam or quarantined, you can find the reason code in the logs.

To see the logs:

1. Go to Remote Console -> Status -> Logs.
2. Select Anti-Spam in the dropdown.
3. Set the date and time.
4. Click Refresh.

If a non-junk email was scored as spam, see How to correct false positives (misclassified emails)

How to deal with spam in email body

If spam has reached your mailbox, we recommend the following steps to deal with it.

1. Are there specific words you can use to filter out similar spam messages? Create a blacklist of words that will trigger action to move email to spam. To do this, go to Remote Console -> Anti-Spam -> Black&White List. Click Add and add the words to the list. 

   Note: Go to IceWarp documentation to learn more about Antispam settings.

2. Are there any suspicious links you want to immediately send to spam? Create a content filter rule to reject emails with those links. Go to Remote Console -> Mail -> Rules. Click Add. In the Rule dialog, select the condition Where Message body matches some words, and then choose the action Accept/Reject/Delete/Spam/Quarantine. In the rule description, click some words and add the link. If you want to change the action, click it (it is set to Reject by default) and select another one.

   Note: Go to IceWarp documentation to learn more about Mail Rules.

3. Do you want to block all emails with external images in the body? Go to your WebClient, click Options -> Mail -> General and disable Automatically display external inline messages.  In WebClient Options, you can also set rules and manage behavior of your Mail service.

How to deal with spam in attachments

While Antispam checks the content of a mail and the reputation of a sender, Antivirus scans the attached files for any potential threats. In Epos, we use the advanced security solution provided by Sophos antivirus. It can thoroughly scan incoming and outgoing email messages for viruses during SMTP transmission.

You can select how to manage the attachments with specific extensions from local or remote senders. Go to Remote Console -> Anti-Virus -> Extension Filters. Click Add to create a new filter.