eScan - Antivirus & Content Security Forum

Hello Sir,
I had a question about SPAM filter.

I had received one kind SPAM mail for some days.

The sender is always different.

The Subject may change some words, but looks like this :
"Pssst:USA Players! Find BIG THINGS & S"

The mail body like this:
Know what it feels like to win!

Try the best online games with your brand new $2400 bonus right when you enter.

We are serious about your fun. US players are in the money to! EVERYONE gets a taste of winning for free and feeling like a VIP.

Use free money and try the biggest progressive jackpots, tournaments, and prizes just for playing.

All our guests feel like royalty starting with you!

http://vipnewgaming.com/

Olin Edwards


And I used "train as spam" for every mail I received, but eScan still NOT filter this kind mails...

What should I do , if I want to filter this kind mails....

Sidney wrote:Hello Sir,
I had a question about SPAM filter.

I had received one kind SPAM mail for some days.

The sender is always different.

The Subject may change some words, but looks like this :
"Pssst:USA Players! Find BIG THINGS & S"

The mail body like this:
Know what it feels like to win!

Try the best online games with your brand new $2400 bonus right when you enter.

We are serious about your fun. US players are in the money to! EVERYONE gets a taste of winning for free and feeling like a VIP.

Use free money and try the biggest progressive jackpots, tournaments, and prizes just for playing.

All our guests feel like royalty starting with you!

http://vipnewgaming.com/

Olin Edwards


And I used "train as spam" for every mail I received, but eScan still NOT filter this kind mails...

What should I do , if I want to filter this kind mails....

Hello Sidney,

Enable the below two options:
1) Enable Spam URI Realtime Blacklist (SURBL) Check
2) Enable Realtime Blackhole List (RBL) Check

To configure the above setting,
1) Open the eScan Content Administrator
2) Click on eMail Content Scanning and Click on the Advance Button,
3) In the Advance email Content Scanning option window, again click on the Advance button under Spam Filter Config section,
4) In the Advance Spam Filtering options, enable the above 2 checks.

eScan will query the RBL and the SURBL site.

NOTE: You can post your spam related queries in the Technical Support section of the forum.

Hello Divesh,
I had already enable the two options in my advanced spam filter.
And today the spam e-mail to me again.. and NOT been filter.

The Sender is another wild account like "linpaulwolffmet@paulwolff.de"
The Subject is the same "Pssst:USA Players! Find BIG THINGS & S"
The body is :
Relax and have fun with poker, blackjack, roulette, progressive video slots at your own leisure from your couch.

Our safe, secure games will get you smiling when you start seeing dollars pouring in.

We're serious about fun. When YOU WIN, we win!

http://goldluxplaying.com/

Bert Matthews
=============================================

And the mail also had a hyper link http://gamingbestfirst.net in the words "When YOU WIN, we win!".

I think your RBL site database do NOT have the record... maybe you can update them....

Sidney wrote:Hello Divesh,
I had already enable the two options in my advanced spam filter.
And today the spam e-mail to me again.. and NOT been filter.

The Sender is another wild account like "linpaulwolffmet@paulwolff.de"
The Subject is the same "Pssst:USA Players! Find BIG THINGS & S"
The body is :
Relax and have fun with poker, blackjack, roulette, progressive video slots at your own leisure from your couch.

Our safe, secure games will get you smiling when you start seeing dollars pouring in.

We're serious about fun. When YOU WIN, we win!

http://goldluxplaying.com/

Bert Matthews
=============================================

And the mail also had a hyper link http://gamingbestfirst.net in the words "When YOU WIN, we win!".

I think your RBL site database do NOT have the record... maybe you can update them....

Hello Sidney,

Please check the email scan log (escanmon.log file from \Program files\escan\log folder). Ans search for the sender's email id and check the action taken for this particular email id. Or email us the debug of eScan to support@mwti.net to analyse the same. This will help us to analyse. (NOTE: It is also necessary that the DNS server is also available while eScan queries the RBL / SURBL sites)

Hello Divesh,
It's OK now...
Today eScan can filter this kind spam...

Maybe your RBL had been updated....

Sidney wrote:Hello Divesh,
It's OK now...
Today eScan can filter this kind spam...

Maybe your RBL had been updated....

Hello Sidney,

Great !!! You can always check the escanmon.log for the action taken.
Some information I would like to share about the RBL and the SURBL sites. The RBL and the SURBL are different independent sites which is handled by various organisations to check spamers, monitor broadcasting IP etc.. in the world wide networks. Each of these sites has different policies and ways to manage a database of spammers. You can visit the www.surbl.org for more info.
For eg. when the feature of SURBL in eScan is enable, it will check for any presence of any links / site names in the body of the message and do a query with the multi.surbl.org to check if the link is blacklisted. If it is present it will take the necessary action.
You can check by clicking on the "Lookup" option in the www.surbl.org and do a search of the link http://goldluxplaying.com/ which will show it is blacklisted.
Hope I have been of assistance to you. HAVE A NICE DAY!