Spam messages are pieces of mail detected by the Mail Assure filter as being unsolicited or inappropriate due to a number of reasons.
Messages with a Main Class of Spam can have any of the following Sub Classes:
Sub Class:
match-set1
Nearly identical messages to this have been reported as spam by other users.
Extra Class
The Extra Class for messages with this Sub Class will show a number from 0 - 1 indicating how similar the message was.
match-set2
Nearly identical messages to this have been reported as spam by other users.
Extra Class
The Extra Class for messages with this Sub Class will show a number from 0 - 1 indicating how similar the message was.
contact-box
The message's Reply-To address, or an email address in the message, has been found to be typically used for spam.
Extra Class
The Extra Class of messages with this Sub Class will show the problematic address.
contact-box-internal
The message's Reply-To address, or an email address in the message, has been seen locally in spam.
Extra Class
The Extra Class of messages with this Sub Class will show the problematic address.
dnsbl
The sending server's IP address had been known to be a source of spam.
Release and Training the message from quarantine will report it as a classification mistake to correct our systems.
For a temporary override and further details, please see http://www.spamrl.com.
Extra Class
The Extra Class of messages with this Sub Class will show the name of the Block list.
dnsbl-rcpt
The sending server's IP address had been known to be a source of spam, and the message was rejected at "RCPT TO" time.
These messages are not quarantined.
Extra Class
The Extra Class of messages with this Sub Class will show the name of the Block list.
urlbl
The message contained a URL or domain name that had been seen in spam messages and listed on several Block lists.
Release and training the message from quarantine will report it as a classification mistake to correct our systems.
The rejection message received by the sender contains more information about the list where the URL or domain in question has been Block listed.
Extra Class
The Extra Class of messages with this Sub Class will show the name of the Block list.
badly-formed
Structural problems within the message such as non-ASCII characters (which is not allowed by the RFC unless properly encoded - such as with UTF-8) prevented full analysis of the message through the Mail Assure filters.
invalid-domain
The destination domain was not a valid domain handled by the cluster.
Incoming messages are rejected immediately without being quarantined.
invalid-recipient
The destination mailbox did not exist.
Incoming messages are rejected immediately without being quarantined.
dictionary-attack
The sender was attempting to identify valid email addresses by sending numerous emails to a series of randomly generated addresses.
gtube
The GTUBE testing string was found in the message.
stube
The STUBE testing string was found in the message.
batv
The message falsely claimed to be a bounce of a message that was sent by the user.
statistical-method1-cluster
The message content was statistically very similar to other messages that have been trained before on this cluster.
Extra Class
The Extra Class of messages with this Sub Class will show a number from 0 - 1 indicating how similar the message was.
statistical-method2-cluster
The message content was statistically very similar to other messages that have been trained before on this cluster.
Extra Class
The Extra Class of messages with this Sub Class will show a number from 0 - 1 indicating how similar the message was.
statistical-method1-global
The message content was statistically very similar to other messages that have been trained before globally.
Extra Class
The Extra Class of messages with this Sub Class will show a number from 0 - 1 indicating how similar the message was.
statistical-method2-global
The message content was statistically very similar to other messages that have been trained before globally.
Extra Class
The Extra Class of messages with this Sub Class will show a number from 0 - 1 indicating how similar the message was.
sender-reputation
The sender of the message was known to send predominately this type of mail.
combined-statistical
No specific classifiers were certain of the message's classification, and a best guess was made based on the statistical similarity to messages that have been trained in the past.
The "combined" result provides a weighted classification score of the different classifiers. Depending on the configured Quarantine Threshold, the message will be rejected as spam or accepted.
If the message is not legitimate, Train as spam. This will adjust the scoring in our various databases.
If the message is legitimate, Release and train from quarantine. This will adjust the scoring in our various databases.
heuristic-set1
The message matched multiple patterns that are commonly found in spam messages.
Extra Class
The Extra Class of messages with this Sub Class will show the pattern(s) found in spam messages.
heuristic-set2
The message matched multiple patterns that are commonly found in spam messages.
Extra Class
The Extra Class of messages with this Sub Class will show the pattern(s) found in spam messages.
heuristic
The message contained content or meta-data that is common to spam or phishing practices.
Extra Class
The Extra Class of messages with this Sub Class will show the content or meta-data that has been seen in spam or phishing tactics.
pattern
The message layout, format or content matched a pattern known to be found in spam and phishing attempts.
Release and train the message from quarantine to report it as a classification mistake to correct our systems.
The rejection message received by the sender contains more information.
Extra Class
The Extra Class of messages with this Sub Class will show the source of the data which gave a content pattern match.
pattern-remote
The message contained a link to content that matched a pattern known to be found in spam and phishing attempts.
Release and train the message from quarantine to report it as a classification mistake to correct our systems.
The rejection message received by the sender contains more information.
Extra Class
The Extra Class of messages with this Sub Class will show the source of the data which gave a content pattern match.
combined
No specific classifiers were certain of the message's classification, and a best guess was made.
The "combined" result provides a weighted classification score of the different classifiers. Depending on the configured Quarantine Threshold, the message will be rejected as spam or accepted.
If the message is not legitimate, Train as spam. This will adjust the scoring in our various databases.
If the message is legitimate, Release and train from quarantine. This will adjust the scoring in our various databases.
Extra Class
The Extra Class for messages with this Sub Class will show the weighted classification score between 0 - 1.
ratelimited
The sending server has exceeded the maximum amount of concurrent SMTP connections that can be made in the time limit.
Extra Class
The Extra Class for messages with this Sub Class will show the number of concurrent SMTP connections and the time limit.
E.G. 10 / 1m / recipient