Community Manager kgroneman Community Manager
Community Manager
191 views

Spam filter vs Black List

Jump to solution
This is probably a dumb end user question (because I'm a dumb end user).

When I go into my quarantine, I see posts that have been caught by the spam filter. I have the option of marking them black listed. Is there a benefit of doing so? Logically, to me, if the spam filter caught them, the work is done. Why would I want to take the time to mark them as black listed? Looking to be a little bit educated here. Thanks in advance. - Kim
--
My computer used to beat me at chess all the time, but then I changed the competition to kick boxing.......
0 Likes
1 Solution

Accepted Solutions
Knowledge Partner
Knowledge Partner

Re: Spam filter vs Black List

Jump to solution
kgroneman;2500688 wrote:
This is probably a dumb end user question (because I'm a dumb end user).

When I go into my quarantine, I see posts that have been caught by the spam filter. I have the option of marking them black listed. Is there a benefit of doing so? Logically, to me, if the spam filter caught them, the work is done. Why would I want to take the time to mark them as black listed? Looking to be a little bit educated here. Thanks in advance. - Kim


Normally, SMG would be configured to do the easier checks first. It's easier and faster to block an IP address than it is to scan an email.

If you are getting thousands of emails from a specific source (user, IP address, etc.) it would make sense to blacklist them otherwise, as you point out, once the spam filter caught them, the work is done.
_____
Kevin Boyle - Knowledge Partner - Calgary, Alberta, Canada
Who are the Knowledge Partners?
If you appreciate my comments, please click the Like button.
If I have resolved your issue, please click the Accept as Solution button.
5 Replies
Knowledge Partner
Knowledge Partner

Re: Spam filter vs Black List

Jump to solution
kgroneman;2500688 wrote:
This is probably a dumb end user question (because I'm a dumb end user).

When I go into my quarantine, I see posts that have been caught by the spam filter. I have the option of marking them black listed. Is there a benefit of doing so? Logically, to me, if the spam filter caught them, the work is done. Why would I want to take the time to mark them as black listed? Looking to be a little bit educated here. Thanks in advance. - Kim


Normally, SMG would be configured to do the easier checks first. It's easier and faster to block an IP address than it is to scan an email.

If you are getting thousands of emails from a specific source (user, IP address, etc.) it would make sense to blacklist them otherwise, as you point out, once the spam filter caught them, the work is done.
_____
Kevin Boyle - Knowledge Partner - Calgary, Alberta, Canada
Who are the Knowledge Partners?
If you appreciate my comments, please click the Like button.
If I have resolved your issue, please click the Accept as Solution button.
Community Manager kgroneman Community Manager
Community Manager

Re: Spam filter vs Black List

Jump to solution
Thanks Kevin.

That's interesting. I would have tought that the spam filter is the one that has to do the heavy lifting and scan the entire email, and blacklist would only have to look at the email address or IP so it would be desirable to have them in the blacklist if you wanted to save bits and bytes of processing. Did I understand you right that this is reversed and it's less desirable to have them in the blacklist? - Kim
--
My computer used to beat me at chess all the time, but then I changed the competition to kick boxing.......
0 Likes
Knowledge Partner
Knowledge Partner

Re: Spam filter vs Black List

Jump to solution
kgroneman;2500699 wrote:
Thanks Kevin.

That's interesting. I would have tought that the spam filter is the one that has to do the heavy lifting and scan the entire email, and blacklist would only have to look at the email address or IP so it would be desirable to have them in the blacklist if you wanted to save bits and bytes of processing. Did I understand you right that this is reversed and it's less desirable to have them in the blacklist? - Kim


What you say is correct. There is much less overhead blocking a single IP address or sender's email address.

The issue is this: How much spam do you get from the same email address or IP address? If you get 1,000 spam emails and block each one, what are the chances of getting even a second one from the same source? If you block every spam email you receive you create a large list of sources against which each incoming email must be checked. That would greatly increase the overhead and, if no match is found, the email would still need to be scanned to see if it was spam.
_____
Kevin Boyle - Knowledge Partner - Calgary, Alberta, Canada
Who are the Knowledge Partners?
If you appreciate my comments, please click the Like button.
If I have resolved your issue, please click the Accept as Solution button.
0 Likes
Community Manager kgroneman Community Manager
Community Manager

Re: Spam filter vs Black List

Jump to solution
Thanks. I understand now. Blacklist those you get a lot from, and let the spam filter take care of the rest.
--
My computer used to beat me at chess all the time, but then I changed the competition to kick boxing.......
0 Likes
Knowledge Partner
Knowledge Partner

Re: Spam filter vs Black List

Jump to solution
kgroneman;2500710 wrote:
Thanks. I understand now. Blacklist those you get a lot from, and let the spam filter take care of the rest.


Another thing to consider: SMG is not perfect. Sometimes somethings are flagged as spam when they aren't. When you see them in the quarantine you can release them. If they are blacklisted, they may not make it to the quarantine.
_____
Kevin Boyle - Knowledge Partner - Calgary, Alberta, Canada
Who are the Knowledge Partners?
If you appreciate my comments, please click the Like button.
If I have resolved your issue, please click the Accept as Solution button.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.