How to notify Microsoft of false negative and false positive spam messages that are identified by Antigen or Forefront

Article translations Article translations
Article ID: 924951 - View products that this article applies to.
Expand all | Collapse all

On This Page

INTRODUCTION

This article describes how to notify Microsoft when the Microsoft Advanced Spam Manager or Forefront Protection 2010 for Exchange Server (FPE) does not identify an unsolicited commercial e-mail message as spam. This is also known as a false negative. Additionally, the article describes how to notify Microsoft when the Advanced Spam Manager or FPE incorrectly identifies a legitimate e-mail message as spam. This is also known as a false positive.

MORE INFORMATION

It is most effective to report spam messages as you receive them during the day or night. You must not archive spam messages and then release them one time per day or one time per a week. Most spam messages are time sensitive. If the submissions occur throughout the day, Microsoft can respond to spam messages in a timely manner.

Submitting false positives and false negatives to Cloudmark

To submit a false positive or false negative spam e-mail message to Cloudmark, send the e-mail message as an RFC 2822 attachment (.eml). Do not send misclassified messages by using the Forward command. The Forward command strips the messages of essential header information and results in an invalid submission.

False positives (legitimate e-mail messages marked as spam by Cloudmark) should be sent to the following e-mail address:
Forefront-legit@submit.cloudmark.com
False negatives (spam not detected by Cloudmark) should be sent to the following e-mail address:
Forefront-spam@submit.cloudmark.com
Note To attach an e-mail message as an RFC 2822 attachment, follow these steps:
  1. In Microsoft Outlook, create a new e-mail message.
  2. Address it to the appropriate address.
  3. Click the Attach Item button, select the e-mail messages that were falsely classified, and then click OK.

Properties

Article ID: 924951 - Last Review: September 29, 2011 - Revision: 6.0
APPLIES TO
  • Microsoft Forefront Protection 2010 for Exchange Server
  • Microsoft Antigen Spam Manager
  • Microsoft Antigen 9.0 for Exchange
  • Microsoft Antigen for SMTP Gateways
  • Sybari Antigen 8.0 for Microsoft Exchange
  • Sybari Antigen 8.0 for SMTP Gateways
  • Sybari Advanced Spam Manager 8.0
Keywords: 
kbinfo kbhowto KB924951

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com