I'm troubleshooting some messaged that were marked as spam by the Sophos but the Mail Log does not list the reason the messages are blocked. The Sophos mail log Sohos Mail logs only show. DATE, SATATUS,SENDR,RECIPIENT,SUBJECT,SIZE. We check for everything RBL, DKIM, etc. Can they show REASON for [SPAM] prepend? 2021-09-29 11:37:41 Delivered news=domain.net@ ... user@mydomain.com [SPAM] Your notes for the day . . . 66 KB 2021-09-29 11:29:26 Delivered user.name@domain.com user2@ my domain .com [SPAM] COVID LEVEL . . . 10 KB 2021-09-29 11:27:56 Delivered 0100017c32cff888-4c1 ... user3@ my domain .com [SPAM] Click Here F. . . 4 KB What's the recommended troubleshooting step?

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Mail logs should list Reason for marking as spam.

I'm troubleshooting some messaged that were marked as spam by the Sophos but the Mail Log does not list the reason the messages are blocked.
The Sophos mail log

Sohos Mail logs only show. DATE, SATATUS,SENDR,RECIPIENT,SUBJECT,SIZE.

We check for everything RBL, DKIM, etc.

Can they show REASON for [SPAM] prepend?

2021-09-29 11:37:41	Delivered	news=domain.net@ ...	user@mydomain.com	[SPAM] Your notes for the day . . .	66 KB
2021-09-29 11:29:26	Delivered	user.name@domain.com	user2@mydomain.com	[SPAM] COVID LEVEL . . .	10 KB
2021-09-29 11:27:56	Delivered	0100017c32cff888-4c1 ...	user3@mydomain.com	[SPAM] Click Here F. . .	4 KB

What's the recommended troubleshooting step?

This thread was automatically locked due to age.

Top Replies

BAlfson over 3 years ago in reply to SoMoney +1

Hi and welcome to the UTM Community! These are lines from the Mail Manager, not from the SMTP Proxy log which you can find in the 'Logging & Reporting' area. There, you can see what SASI considered spammy…

0 SoMoney over 3 years ago

Hate to do it but for now, we'll just have to whitelist the source domain until we can figure out a way to determine which test failed to mark the email(s) as spam...
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to SoMoney

Hi and welcome to the UTM Community!

These are lines from the Mail Manager, not from the SMTP Proxy log which you can find in the 'Logging & Reporting' area. There, you can see what SASI considered spammy about a message flagged as spam.

Cheers - Bob

NOTE: My answer was for UTM, not XG.
Cancel
Vote Up +1 Vote Down

Cancel
0 SoMoney over 3 years ago in reply to BAlfson

Thanks for the reply!
I'm running the latest Sophos XG fw, I do not see a "Logging & Reporting"
What am I missing here?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago in reply to SoMoney

Moving this thread to the XG Community.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel