SNF Free 30 Day Trial
Sign Up Now!

Support

False Positives

URGENT False Postives

Do not use this procedure for ordinary false positive reports. Use the ORDINARY False Positives procedure below. Only use this procedure for critical & urgent false positive cases. These are extremely rare, none the less we have built a solution into SNF so that you can get relief in these cases immediately and on your own!

If you have an urgent false positive issue, such as a pattern rule that is capturing a large portion of your legitimate mail, you can GAIN IMMEDIATE RELIEF by:

  1. Identify the specific rule ID that is causing the problem. You should be able to find it in your SNF log file or in the X- headers of the FP messages depending upon how you have configured your system.
  2. Create a rule-panic entry in your configuration file for the offending rule ID. This will render the rule inert immediately without disrupting other spam filtering.
  3. Send a simple text email to support@aremresearch.com indicating that you have a critical false positive. DO NOT include an FP example. DO include the rule ID that is causing the problem.
  4. VERY IMPORTANT: After you have taken the above steps, follow the false positive handling process described below to resolve the false positive case correctly and completely.

ORDINARY False Positives

SEND ONLY FALSE POSITIVE REPORTS TO THE FALSE@ARMRESEARCH.COM ADDRESS!

OFFICIAL POLICY IS TO IGNORE FALSE POSITIVE SUBMISSIONS FROM SYSTEMS WE CANNOT IDENTIFY IN ORDER TO PREVENT ABUSE.

Step by Step Instructions for Sending a False Positive:

  1. Start a new message from your registered email address. Please include your license ID in subject line.
  2. Add any notes you'd like us to know about the problem.
  3. If possible, paste in the sniffer log entries from your system that match the message in question. This is particularly important if there are ERROR messages.
  4. Attach the message that was captured incorrectly.
  5. Send the message only to our false@armresearch.com address.
  6. Our system will scan the message for any rules that can be matched.
  7. We will respond to you with an explanation and possible recommendations for changes to your rulebase.
  8. You can respond back to authorize changes to your rulebase based on our recommendations or based on your own insight.
  9. We will complete the changes and respond that we have done so.