{"id":351,"date":"2016-07-28T15:00:12","date_gmt":"2016-07-28T14:00:12","guid":{"rendered":"http:\/\/blogs-new.it.ox.ac.uk\/nexus\/?p=351"},"modified":"2016-08-01T13:48:02","modified_gmt":"2016-08-01T12:48:02","slug":"why-does-nexus-send-me-spam","status":"publish","type":"post","link":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/2016\/07\/28\/why-does-nexus-send-me-spam\/","title":{"rendered":"&#8220;Why does Nexus send me spam?&#8221;"},"content":{"rendered":"<p>We have had a spate of spam making it into Nexus mailboxes recently, provoking a flurry of discourse on the ITSS-Discuss mailing list. To be able to stop spam more effectively there are some checks that IT Support Staff can do with their users prior to logging support tickets.<\/p>\n<p>Spam detection isn&#8217;t as simple as virus\/malware detection:\u00a0there isn&#8217;t the same\u00a0definitive certainty one gets when a virus&#8217; signature matches a message&#8217;s attachment. To conclusively determine if a message is spam requires an understanding of context and language that is currently still far in excess of a humble computer&#8217;s\u00a0capabilities. There is also a personal aspect &#8211; one person&#8217;s spam message is another&#8217;s crucial information. So spam <em>isn&#8217;t<\/em> deleted, no matter how certain we can be that that&#8217;s what it is. Instead we allow you to personally set your own tolerance to spam. If you\u00a0do this correctly it will determine what goes into &#8216;Junk&#8217; and what goes into &#8216;Inbox&#8217;.<\/p>\n<p>Firstly though, here&#8217;s what is going on with\u00a0incoming email:<\/p>\n<p><span style=\"color: #0000ff\"><strong>ON ARRIVAL AT THE UNIVERSITY<\/strong><\/span><br \/>\nNew messages arrive at OXMAIL and are scanned. Details of Oxmail&#8217;s processes can be found here:\u00a0<a href=\"http:\/\/help.it.ox.ac.uk\/email\/scanning\/index\">http:\/\/help.it.ox.ac.uk\/email\/scanning\/index<\/a> and here:\u00a0<a href=\"https:\/\/help.it.ox.ac.uk\/network\/smtp\/relay\/index\">https:\/\/help.it.ox.ac.uk\/network\/smtp\/relay\/index<\/a><\/p>\n<p>OXMAIL then sends messages on to their destination, which might be Nexus, forwarded to a personal email address outside the University, or to a departmental server.<\/p>\n<p><span style=\"color: #0000ff\"><strong>ON ARRIVAL AT NEXUS<\/strong><\/span><br \/>\nThe spam score assigned by OXMAIL is translated directly into a Spam Confidence Level, or SCL. Each asterisk in the\u00a0<strong>X-Oxmail-Spam-Level<\/strong> header\u00a0is counted: the total becomes that message&#8217;s SCL. So this example &#8216;X-Oxmail-Spam-Level: *********&#8217; would have\u00a0an SCL of 9.<\/p>\n<p>Nexus is able to automatically move spam messages into the Junk folder of your mailbox before you see them, <em>but only if you tell\u00a0it to do so<\/em>. This is a <span style=\"color: #ff0000\">two-stage<\/span> process:<\/p>\n<ol>\n<li><span style=\"color: #ff0000\">Turn on the spam filter in OWA. <span style=\"color: #000000\">This step often gets overlooked. Without doing this step any\u00a0setting you apply won&#8217;t take effect. Instructions for doing this can be found here:<\/span> <a href=\"https:\/\/help.it.ox.ac.uk\/email\/filter\/index\" target=\"_blank\">https:\/\/help.it.ox.ac.uk\/email\/filter\/index<\/a>.<\/span><\/li>\n<li><span style=\"color: #ff0000\">Select your level of tolerance to spam.<\/span> This is done via\u00a0the SelfReg tool (<a href=\"https:\/\/register.it.ox.ac.uk\/self\/nexus\" target=\"_blank\">https:\/\/register.it.ox.ac.uk\/self\/nexus<\/a>).<br \/>\nThe higher the SCL is that you can accept, the fewer messages will be moved into Junk. The options equate to the following:<br \/>\nOFF: All messages will go into your Inbox.<br \/>\nLOW: Messages with an SCL above 7 will be moved to Junk.<br \/>\nMEDIUM: Messages with an SCL above 5 will be moved to Junk.<br \/>\nHIGH: Messages with an SCL above 3 will be moved to Junk.<\/li>\n<\/ol>\n<p><span style=\"color: #0000ff\"><strong>WHY DO YOU TELL US TO TURN OFF JUNK FILTERS IN OUTLOOK?<\/strong> <\/span>(or other email clients?)<\/p>\n<p>The assessment of spamminess done by OXMAIL is logged, consistent, and repeatable. If two people are sent the same message, and have the same spam-filtering preference set, then the same thing should happen to that message for both people.<\/p>\n<p>End-users&#8217; applications aren&#8217;t so clear-cut. Each program can use widely differing technologies to assess spam and the software which scans it isn&#8217;t always the same version,\u00a0even when the application is the same. Furthermore,\u00a0messages that are moved to Junk by the email client application can&#8217;t be differentiated between a user choosing to move a message between folders or their software doing it for them. All that Nexus&#8217; servers see is an end-user request for a message to be moved.<\/p>\n<p>In other words Outlook, and others, can do a pretty good job of spotting and filtering spam after it&#8217;s delivered. But we can&#8217;t guarantee that your program\u00a0won&#8217;t falsely-identify a genuine message as spam. We can&#8217;t guarantee that your experience will match that of the person next to you (do they update as often as you do?). We can&#8217;t see in our logs what process decided to move that message between folders.<\/p>\n<p>By deactivating client-side spam filtering we can be sure that the only\u00a0spam processing that does happen is recorded in message headers.\u00a0 This gives us a fighting chance of diagnosing any issues with the process. If you do spam filtering in your application you are muddying the waters for us if things misbehave and you want us to help you to troubleshoot.<\/p>\n<p><span style=\"color: #0000ff\"><strong>WHAT CAN I DO BEFORE LOGGING A TICKET?<\/strong><\/span><\/p>\n<ol>\n<li>Check that the user has set spam processing in SelfReg <span style=\"color: #ff0000\"><strong>AND<\/strong> <\/span>has turned on spam processing in OWA.<\/li>\n<li>Review the headers of an offending message to see what Spam Score it has been given.<\/li>\n<li>Verify if the user&#8217;s application software, or rules processing, or macros, or any other such process might be doing additional spam processing \/ filtering.<\/li>\n<li>Ensure that the end-user hasn&#8217;t configured a whitelist within their email application that is over-riding the spam-processing values they have set.<\/li>\n<li>Record the outcome of these tests in the details when you log a ticket for us to investigate why you are receiving spam to your inbox.<\/li>\n<\/ol>\n<p><a href=\"http:\/\/blogs-new.it.ox.ac.uk\/nexus\/files\/2016\/07\/nexus_itss_spam-processing1.jpg\" rel=\"attachment wp-att-359\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-359\" src=\"http:\/\/blogs-new.it.ox.ac.uk\/nexus\/files\/2016\/07\/nexus_itss_spam-processing1.jpg\" alt=\"nexus_itss_spam-processing[1]\" width=\"930\" height=\"698\" srcset=\"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/files\/2016\/07\/nexus_itss_spam-processing1.jpg 960w, https:\/\/blogs-new.it.ox.ac.uk\/nexus\/files\/2016\/07\/nexus_itss_spam-processing1-300x225.jpg 300w, https:\/\/blogs-new.it.ox.ac.uk\/nexus\/files\/2016\/07\/nexus_itss_spam-processing1-768x576.jpg 768w\" sizes=\"auto, (max-width: 930px) 100vw, 930px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>EDIT 1st August 2016:<\/p>\n<p>In the case of a shared mailbox SelfReg does not currently allow you to alter the spam preference &#8211; it is limited to the currently-logged-on user. However the Nexus team can manually apply spam preference\u00a0values for you if spam becomes an issue within a shared mailbox.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>We have had a spate of spam making it into Nexus mailboxes recently, provoking a flurry of discourse on the ITSS-Discuss mailing list. To be able to stop spam more effectively there are some checks that IT Support Staff can &hellip; <a href=\"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/2016\/07\/28\/why-does-nexus-send-me-spam\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":107,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-351","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/wp-json\/wp\/v2\/posts\/351","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/wp-json\/wp\/v2\/users\/107"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/wp-json\/wp\/v2\/comments?post=351"}],"version-history":[{"count":11,"href":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/wp-json\/wp\/v2\/posts\/351\/revisions"}],"predecessor-version":[{"id":365,"href":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/wp-json\/wp\/v2\/posts\/351\/revisions\/365"}],"wp:attachment":[{"href":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/wp-json\/wp\/v2\/media?parent=351"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/wp-json\/wp\/v2\/categories?post=351"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs-new.it.ox.ac.uk\/nexus\/wp-json\/wp\/v2\/tags?post=351"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}