SMTP disabled for spam coming from a forwarding address

I recently received a spam violation notice from the Abuse department. They shut off one of my customer’s SMTP service and locked them out of their control panel. The thing is, the address that was “sending” the spam was a forwarding address. Anyone, anywhere could relay messages through that address.

How can you blame and take action against someone for actions beyond their control? Your actions make me look bad in front of my customers.

While I’m at it, your incoming spam filtering is either broken or just not worth whatever you paid for the software. Mailboxes set to Aggressive/Very Aggressive filtering levels are still filled daily with mounds of junk. So you watch the outgoing like a hawk and penalize folks for problems that aren’t theirs but you don’t do anything to relieve folks of the piles-o-crap coming in.

Incoming spa filters and outging are different, but forwarding mails can be a risk on reported spam.

If this was reported to us for spam, it would have been reported by the user that got the mail at the address it was forwarded to, which is always a risk with forwarding mail to other mail servers. If they get forwarded mail and report as spam it can be seen as your user with forward sending the mail.

Now we have much better anti spam system with better processing but it is an outside system and can’t work with the Hsphere (or Plesk with VPS for that matter) SpamAssassin protections.

We have done a lot of work tweaking SpamAssassin on several servers and rolling it out the others, but have been measuring the false positives against the tweaks and a few don’t like getting a very low (way less than 1%) false positive rate. Oh and the aggressive setting and one point wasn’t actually changing the threshold I’d need to see headers now to know if it is. On the headers look at the spamassassin headers and see what the max spam value tag is, see if it moves the spam # rating for what is needed, that will confirm the changes are taking for the spam level settings.

Do you have a ticket number I can check for details on this matter? I am trying to investigate it and we have several such cases lately so unsure which one.