AntiSpam strange behaviour

Hello everyone.

Can someone please describe me why this example spam mail was delivered to user ?

I attached a export from fortimail with an example, and it is looks like whitelisted value "notifications@monday.com" was marked as equivalent to "bounces+6182960-837b-Name.Surname=My.Domain@emails.monday.com" that is present in From field.

How is it possible ?

Here is a detailed trace for a mail:

SuperUser

Hi

Your user has that sender in his whitelist, (see classifier tab: User Safe)

New Member

that is not true actually....

because my user have in whitelist address: notifications@monday.com

and we are getting mail whwere From parameter is set to:

bounces+6182960-837b-Name.surname=My.Domain@emails.monday.com

which is far away from beeng look like whitelisted address.

This one is even from different domain, from @emails.monday.com.

Staff

You have Personal Safe List entry for "notifications@monday.com" and this is what appears in the Header From (see the first history log line).

Sign up