Can I Feed False Negatives to the Signature Spam Engine?

  • 7019771
  • 08-Sep-2009
  • 07-Aug-2017

Environment

GWAVA 4.5 on Linux Build 122 or newer

Situation

If I have spam that is not being blocked by the Signature Spam Engine, can I send them somewhere for training, so they will get blocked in the future?

Resolution

The Signature spam engine works similar to a virus scanner. Definitions are created based on spam seen on a global level. These definition files determine if a message is spam or not. Definitions are kept up to date because the signature spam engine will receive definition updates as soon as they are available.

Currently, there is not a way to feed or train uncaught spam (false negatives) into the system. Once that type of spam is seen by the global infrastructure it will be added to the definitions. There will most likely be a definition file to block this type of spam soon.

Additional Information

This article was originally published in the GWAVA knowledgebase as article ID 1428.