Answer
If you are questioning why an email was blocked or allowed by the Spam Keyword Checking filter and would like more information, you can find further details in the log file for that filter. Use the following procedure to find the log and information regarding your message within it, and then use the examples below to interpret why the message was either blocked or allowed:- Find the message ID of the email in question by either gathering it from the headers of the message itself, or by looking for it in the MailEssentials Dashboard > Logs > Details tab
-
Open the ase_keyword_checking.gfi_log file in notepad from ..\GFI\MailEssentials\AntiSpam\DebugLogs
- This log is for the Spam Keyword Checking Filter Module and corresponds to the Configuration > Anti-Spam > Anti Spam Filters > Spam Keyword Checking in the interface
-
Do a search for the Message ID from the dashboard or the email headers
- Note: The Message IDs have been removed from the example log files below
- Note: The bolded lines are the important ones in the log files for determine what has happened and why
There are two main parts to this log. The first loads the information for the module, the second scans the individual emails.
Loading the settings:
Retrieving Keyword Checking setting. Executing query [SELECT * FROM antispam]
Body keyword check disabled: [0]
Subject keyword check enabled: [1]
Display name check enabled: [1]
Loading subject words
Creating word list
Accessing operators
Accessing words
Processing 208 entries
Entried processed - un-accessing strings
Un-accessing operators
Word list done
ID: f5c701480c29eee4df8aaa5fc95c4b4f
Successfully created subject word list [0]
<< Load Config
Licensing check: Licensed
Email was allowed by the module:
>> Process Message
>> ScanSubject
Subject scanned successfully [0]
<< ScanSubject
>> ScanDisplayName
Display name scanned successfully [0]
<< ScanDisplayName
<< Process Message
Note: If a keyword needs to be blocked, add it to the Spam Keyword list in the configuration.
Email was blocked by the module:
<< Init Message
>> Process Message
>> ScanSubject
Subject scanned successfully [0]
<< ScanSubject
>> ScanDisplayName
Display name scanned successfully [0]
<< ScanDisplayName
>> ScanTextBody
IStream scanned successfully [1]
>> CollectResults
<< CollectResults
<< ScanTextBody
Found 3 words: [remove list cum]
Setting actions data ...
Spam detected, Stopping ASE Chain [2]...
Note: If a keyword is incorrectly identified, make sure Match Whole Words is enabled in the filter, whitelist the sender or remove the keyword.
Module is disabled:
Body keyword check disabled: [0]
Subject keyword check disabled: [0]
Display name check disabled: [0]