How do I report false-positive and false-negative spam messages to Symantec Brightmail?
Occasionally, the Brightmail Anti-Spam engine in the IronPort C-Series appliance will improperly mark a message as spam when it is not (“false positive”) or miss spam messages (“false negative”). Your assistance in identifying false positives and false negatives is essential maintaining the efficacy of Brightmail. Symantec provides two email addresses specifically to receive false positive and false negative reports. Messages that have been scanned by Brightmail and resulted in false positives should be sent with all headers to gfeedback@feedback-1.brightmail.com. Messages that have been scanned and are false negatives should be sent, with all headers, to gsubmit@submit-1.brightmail.com. Important – You must send FULL HEADERS and BODY in the message as a RFC-822 MIME encoded attachment when submitting messages to these addresses. Symantec must receive false positives and negatives within 24 hours from the date initially sent to effectively write rules and filter the spam. Here are inst
Related Questions
- I hate spam, and so I report it to places like spamcop so that they can put the spammers servers on blocklists. Can I do that with messages that are forwarded to me by spamgourmet?
- How do I report false-positive and false-negative spam messages to Symantec Brightmail?
- Where do the messages go when I Report Spam? What happens with them?
