Foolproof email sanitation is difficult. Spammers constantly change their tactics to get around the private heuristics of mail sanitation services. Mail sanitation services constantly change their heuristics to address the ever-changing tactics of spammers. Email delivery is imperfect by nature. Penn's O365 environment is complicated by the fact we have multiple mail sanitation services.
Submitting mis-flagged messages provides mail sanitation vendors feedback that will make their services better, and consequently, our service will be better.
Definitions
False Positive : a legitimate message that was incorrectly flagged as junk
False Negative: a spam or phishing message that was not flagged as junk.
Self-reporting False Positives
- Analyze headers using the Microsoft Message Header Analyzer(link is external) or the Google Messageheader(link is external) tool.
- Look for one of the following to determine where it was flagged:
- Proofpoint header: X-Spam-Flag: Yes
- Microsoft header: X-MS-Exchange-Organization-SCL: 5 (or greater)
- Look for one of the following to determine where it was flagged:
- If the ProofPoint header is present, enter a ticket to ISC Client Care.
- If the Microsoft header is present, submit to Microsoft by one of the following methods:
- Use the Report Message add-in(link is external) to mark as Not Junk.
- Mark the message as Not Junk in Outlook on the Web.
- Send the message as an attachment to not_junk@office365.microsoft.com.(link is external)
Self-Reporting False Negatives
- Use the Report Message add-in (link is external)to report the message as Junk or Phishing, accordingly.
- Mark the message as Junk in Outlook on the Web.
To Have ISC Report
Attach ZIP file to an email to Client Care at help@isc.upenn.edu(link is external), or to Remedy if a ticket is already open.
Explain briefly what kind of submission this is, false positive, or false negative, and if you need status updates.