SS not catching too many spams after they have been sent to blocklist

SpamSieve
, , , ,
1

SS not working well enough:

I have added spams like this for more than 6 months several times a day to the block list but SS does not block them. This one comes at least 3 times a day. Please figure out how to block them and ones like them. I have increased the filter to the point SS was blocking valid emails and had to back it off enough to get valid ones. Please SS figure out how. SS blocks about 300 a day but lets through 100 a day. for years SS used to let only a few a day through. Now it is maddening. Thank you for the work you do, but the spammers are winning.

From: AAA Courtesy Support Team aaacourtesys@advocateproperty.lat

Subject: Drivers, AAA Licensed Courtesy Kit for the Road

Date: September 11, 2026 at 10:51:29 AM EDT

Reply-To: aaacourtesys@advocateproperty.lat

Just wrapped up that thing I mentioned last week. It took longer than expected but turned out okay in the end. I think we should try the other approach next time though. The weather has been strange lately, really unpredictable. Anyway, let me know when you are free to catch up. I also found that old book you were looking for in the back of the closet. It was behind the stack of boxes. We should plan something simple for the weekend, maybe just a walk if it is not raining. I have been trying to cut back on screens in the evening. It actually helps a lot with sleeping. Did you ever figure out that puzzle from the other day? I gave up after twenty minutes. Hope your week is going smoothly. Talk soon.

AAA Courtesy Support Team

Drivers, AAA Licensed Courtesy Kit for the Road

Reply-To: aaacourtesys@advocateproperty.lat

List-Unsubscribe:

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Return-Path:

X-Originalsender: aaacourtesys@advocateproperty.lat

X-Feedback-Hash: 761880/ycfpkfbfoflphn=PVfP1McHGqlgVR

X-Smartermail-Spamaction: Low | NoAction

Mime-Version: 1.0

Authentication-Results: dkim=pass (rsa-SHA256) header.s=send header.i=“aaacourtesys@advocateproperty.lat” header.d=advocateproperty.lat header.b=XoafkUZU; spf=pass

X-Smartermail-Spam: Reverse DNS Lookup [Passed]: 0, SPF [Pass]: 0, UCEProtect Level 3: 0, SpamRats: 0, UCEProtect Level 1: 0, McAfee: 0, Backscatter: 0, CBL: 0, SEM - Black: 0, SORBS - No Server: 0, Surriel: 0, SORBS - NoMail: 0, HostKarma - Blacklist, HostKarma - Brownlist: 0, UCEProtect Level 2: 0, MailSpike L3, MailSpike L4, MailSpike L5: 0, Spamhaus - CSS, Spamhaus - PBL, Spamhaus - SBL: 0, SpamCop: 0, SORBS - Abuse, SORBS - Dynamic IP, SORBS - Proxy, SORBS - Socks: 0, Truncate: 0, SORBS - Recent: 0, DMARC [skipped - DMARC Disabled]: 0, DKIM [Pass]: 0, _ARC: none, URIBL Black, URIBL Grey, URIBL Red: 0, SEM-URI: 0, SURBL: 10

Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=send; d=advocateproperty.lat; h=Reply-To:Date:Subject:Message-ID:MIME-Version:Content-Type:List-Unsubscribe: To:From; i=aaacourtesys@advocateproperty.lat; bh=DdGGwme1ut5ByVTjHgPam+okmcAo+D34/BK41aatEnA=; b=XoafkUZUDQHA/GAZK+Omb6fB5fu0ch3A8ztWT1Mk3TInHOH3CFfShn2VRas3ODSaQrRW7sgwr5gf bF1IgxfqcuHDDbtrJsdOODDksljhAnOfCxZYn1LfvAwCLZuwjb4cxHYOjmxQeGECkGDS6dKieogT IqF851FB4C5L16kZxOWgCRTBuhetWPd+ylwEIEgFDlJiVWFy5pDZ1pgilOnZCstFM6PNikkSs375 bMUZVdyQRiPvMwO82wpP7gkXXY4iQ1qCweSITGW5nsFjWfInTOjUjgiGfU5J1MYx36ul+CgrKUcO v9KS7FzL6pRk931yLPCGu3LMsVJbEdyeye5Iig==

X-Accept-Trace:

X-Smartermail-Totalspamweight: 10

Content-Type: multipart/alternative; boundary=“–core=.Quartz-65113832-v510836s872al_HeaderBoundary”

Received: from mta.advocateproperty.lat (inland817[151.247.171.202]) by with SMTP

Begin forwarded message:

AAA

YOUR COURTESY ROADSIDE KIT IS READY

You drive. You plan. You prepare.

As a licensed driver residing in a participating municipality, you are eligible to receive a comprehensive Courtesy Roadside Kit. This kit is provided at no charge to eligible residents through the local community partnership program. The program allocates a specific number of kits for your area. To ensure you receive yours, please confirm your details promptly.

Everything inside is practical, dependable, and made to keep you moving when the unexpected happens.

INSIDE YOUR KIT

- Heavy-duty jumper cables (10 ft, 8-gauge)

- LED flashlight with extra batteries

- Reflective safety vest

- Emergency warning triangle

- Tire pressure gauge

- Duct tape roll

- Multi-tool with pliers and screwdrivers

- Bungee cords (2 pack)

- First aid basics: bandages, antiseptic wipes, gauze

- Emergency blanket

- Zip ties (assorted sizes)

- Window breaker and seatbelt cutter tool

VIEW YOUR AAA COURTESY KIT

Kits are limited for your municipality this cycle. Confirm your details today to secure yours before the allocation window closes.

AAA Community Partnership Program

Roadside readiness for every responsible driver.

2

Could you explain what you mean by that? Which rule(s) did you add for the message below?

Are there rules that you created that you think should have matched subsequent messages, but the rules didn’t seem to work?

Did you train the message as spam? When you do that, SpamSieve should automatically create blocklist rules for the sender’s name and address.

We have no other reports like that, so it’s probably something that can be fixed on your Mac. Please use the Save Diagnostic Report command in the Help menu and send me the report file, as described here.

3

Yes I must be training 100 spams a day. My wife also owns her own copy of SpanSieve and she has the same problem. The ones that get past SS all have the same format but with different topics like AAA, Social Security, FedEx, Walmart, Lowes, etc. everyone comes from a different courtesyroad@waynewebsite.world as example. The block list stops that sender but 10 minutes later the same email comes from a different sender. All day long

I sent you Save Diagnostic Report as a reply you sent me. I hope you received it.

4

Thanks for sending the report.

I am looking at the log back to August 25. I do not see any blocklist rules that you created, only ones that SpamSieve created as a result of your training messages as spam.

The log is showing an average of 68 spams per day and a total of 79 spams that SpamSieve let through since August 11. There were only 63 total messages that you trained as spam since August 27.

So I would like you to be very clear about what you mean what you say that you are “training.” Are you perhaps dragging and dropping messages (which won’t work) instead of using the actual Train as Spam command?

It looks like there are a large number of spams that SpamSieve let through but that you didn’t train as spam, so it thinks they’re good and that you want to see more messages like those. There’s more information about how to fix that here.

5

Here is the head of a email that has come in 3 times today each from a different sender. Each trained as spam

Courtesy Roadside Team <[courtesyroad@waynewebsite.world](mailto:courtesyroad@waynewebsite.world)>
Complimentary Road Kit for AAA Licensed Drivers

I see three of those in the log, but none were trained as spam. One of them got through due to having the same sender name as a message from 9/9 that wasn’t trained as spam.

All the received messages and training are visible in the Log window for you to see.

6

I use:

Comand-Control-S to train and move to spam folder

Comand-Control-G to change back to good and return to inbox.

I do not drag and drop messages.

Thank you

7

when I say move, I mean SS automatically moves the spam to the spam folder.

In the spam folder Command-Control-G automatically moves the email to the In Folder.

8

That is good. I guess it’s many fewer messages than you thought or for some reason some of them are not getting registered. I don’t think I’ve ever actually heard of that happening, but you could watch the Log window as you train and make sure that it matches what you’re doing.

It’s important to train all the spams that get through, and as I mentioned earlier you should fix the old ones that didn’t get trained.

9

on the Log it is saying that all hundreds of Command-Control-S treat these particular emails as Predicted Good.

SpamSieve’s Bayesian classifier predicted this message to be Good based on a statistical analysis of its content.

After I Command-Control-S them. SS keeps letting them through after I Train them as spam.

No I am not exaggerating by much. why does the log sometimes say Trained Good (Auto) after it has been trained spam. I am telling you this is a big problem. there must be a setting wrong.

In the log I trained 27 emails between 4:32 and 4:36 I am still getting Omaha Stakes, My Lowes, Courtesy Road, Roadside Courtesy. After I trained Lowes there is a log that says Trained Good (Auto) and It came again. Something is wrong.

10

these problem emails are all coming from the same source. Everyone has the exact same format with a box around the text, same header format. the content is changed for each business title. all titles are big chain stores or big entities. everyone has a different sender.

11

I have not deleted any of the problem emails. Every single one I have Trained as Spam. The log does not indicate Trained Spam (Manual) for more than it shows.

12

When you Command-Control-S, the log should say Trained: Spam (Manual). The prediction (and Trained: Good (Auto)) are what come before, when SpamSieve first processes the message.

The numbers in the log are off by more than 10× what you reported.

It is a big problem if there are messages that you are receiving or training that are not showing up as such in the log. I don’t know what could cause that, but we could investigate. But so far you haven’t reported any specific inconsistencies like that, so it may just be a training problem.

I’m not sure what this means. Could you explain further?

Did you go back and fix the training of the old messages as I suggested?

13

Micheal,

the onslaught of this particular sender has stopped for now. They usually comes in bursts for a while, stops and then later come back. You have taught me several ways to check logs so I can start to verify actions, symptoms, and results. I will take better notes and more accurate account of what is happening the next time they hit me.

Thank you so much for your help so far. It is reassuring. I hope you don’t mind if I get back to you next time they start sending many multiple senders and bogus advertising. I will be more accurate.

Respect, Jim Fox

14

Sure, that makes sense. To be clear, even though the flood has stopped for now, I still recommend going through the Good Messages section of the Corpus window and training any messages that are actually spam.