How to tune Spambrella’s Spam detection

The Spambrella default Spam settings should be suitable for most situations, but there are cases where some manual influence can help the system make better decisions.  For example, marketing newsletters can be problematic in that the engine has to decide which ones are desirable and which ones are not.  Also, some accounts like ‘info@mydomain’ account can have a different email type profile, and can do well with some fine-tuning.  You can use the following available tools to customize the Spambrella Spam classification:

  • Safelist (Allow filter) rules, and the Release Always button Senders you might need to safelist include legitimate Rolex traders in which you might have a real interest, contacts that use a very spam-heavy template full of images for their HTML disclaimer, or normal contacts if you have a very sensitive spam sensitivity setting. The release button from the quarantine digest report is an easy way to create safelist rules for a sender, and the benefit of creating the rules is that as the system learns, over time it will need to be done less often. If you are a Microsoft customer, you can use the M365 Outlook add-in.
  • Blocklist (Block filter) rules – Senders you might want to block include difficult-to-classify spam with predictable sender addresses, borderline marketing emails you can’t seem to unsubscribe from, or (temporarily) your corporate website contact form that got hacked and is sending spam, which does occur occasionally. Does all your spam come from a “.ru” sender?  Then use the Sender email address filter. Does all your spam originate from IP addresses in China? Then use the IP Country filter (available in the filter extensions, which also allows sender body text filter types). Do you receive many semi-legitimate bulk emails with “Unsubscribe” links at the bottom?  Try creating a low-priority body text filter for “Unsubscribe”, and individual whitelist filters for your real newsletters, and be careful for false alarms. If you are a Microsoft customer, you can use the M365 Outlook add-in.
  • Report emails using logs on the Spambrella Interface – It only takes a few examples of a certain kind of email to be reported before the correction becomes strong enough to automatically update your spam threshold – see AI and ML.
  • Spam Disclaimer – The spam disclaimer is an optional organization-wide or per-user setting that adds a little footer to incoming emails. If an end-user clicks the report email button, they will be navigated to the Spambrella Interface’s Permalink page where the email will immediately be marked as “Reported”, the end-user will also have access to quick dropdown sender filter options for faster results. Please ensure you’ve read the section on reporting above before deciding which course of action to take. To turn on the spam disclaimer, please contact an administrator. Administrators can enable thisNote – If you do not see the spam disclaimer, log into the service portal and search for that email in your email logs. Click actions to the right side for more.
  • Spam Sensitivity Slider – This tool adjusts where the Spambrella engine should make that call between clean/innocent, and spam which it will quarantine. Misclassifications might, in some cases, be just on the other side of that decision line, and you could experiment with slight adjustments here. Please bear in mind that this tool can be a big hammer, it does what it says: If you set the slider to be more sensitive, more emails will get quarantined, clean, or spam.  If you set it less sensitive, more emails will get passed, clean or spam.  The default setting (7) should be fine in most scenarios as the system is designed around it, but the volume-of-spam versus risk-of-catching-real-emails profile can be different for different email accounts, especially for ‘info@mydomain’ type accounts, and the spam slider can be very useful there. The Release and Approve button will always work here as well, so you can combine it with a more sensitive spam slider setting if your senders are fairly regular, but some email accounts like ‘sales@mydomain’ might rely on receiving emails from unknown senders all the time. Or if you’re happy enough that your account receives virtually no spam you can leave the slider at a less sensitive position.
  • Spam Stamp & Forward: Most companies/users will enable quarantine digest delivery. If not, you can choose the Stamp & Forward option. This will mark the email as having been classified as Spam but will still be delivered to the intended recipient.