as-status="MASSMAIL" vs as-status="Spam" [MOVED]

[Jan Diblik]

Hi,

we got many spams daily to our Kaspersky Secure Mail Gateway. Mostly them are blocked properly (look first part of logs below). They are marked as SPAM. But sometimes many same emails pass by Kaspersky - everything is same - subject, message etc, just only name is different, but domain is same (look on logs below). It is marked as MASSMAIL - we dont remove them.

 

I am not sure if I can even solve it :( . Or can you recommend me where can I ask for more details about behaviour below? Maybe get official support from Kaspersky?

 

 

 

Jan  6 18:26:38 xxxxx klms-smtp_proxy: Message from <alexandertngawcn@toplulink.com> to <xxxxx@xxxxx> rejected

Jan  6 18:26:38 xxxxxx KSMG: not clean: message-id="<vpxbhafbcon.kwkncwlladocvmsrkfaewaydrrxz@toplulink.com>": relay-ip="37.123.101.81": action="Rejected, Put in backup": backup-reason="AntiSpam": rules="1": size=3989: mail-from="alexandertngawcn@toplulink.com": rcpt-to="xxxxx@xxxxxxx": kt-status="NotScanned, disabled by settings", av-status="Clean", ap-status="Clean", as-status="Spam", as-method="headers plus", ma-status="NotScanned, disabled by settings", cf-status="Clean"

 

 

Jan  4 10:26:53 xxxxx KSMG: not clean: message-id="<cdgobslafpgvwejjrezxhsdvg@toplulink.com>": relay-ip="37.123.101.80": action="Skipped, Put in backup": backup-reason="AntiSpam": rules="1": size=4559: mail-from="henrietagrfhhmc@toplulink.com": rcpt-to="xxxxxx@xxxxxx": kt-status="NotScanned, disabled by settings", av-status="Clean", ap-status="Clean", as-status="MASSMAIL", as-method="mass mail", ma-status="NotScanned, disabled by settings", cf-status="Clean"

Jan  4 10:26:53 xxxxxx klms-smtp_proxy: Message from <henrietagrfhhmc@toplulink.com> to <xxxxx@xxxxxx> passed