How to Submit Spam to FSL

To report a supposedly missed spam, you need to send a copy of the stored spam message to our semi-automated Spam Analyzer. I say “supposedly missed spam” because about half of the spam reported to us is not really spam or has already been tagged as spam. It is either:


  1. Mail from a legitimate non-spam sender’s email list that the recipient no longer wants to receive. The recipient needs to un-subscribe from the mail list. Since other recipients may want to receive these messages, they cannot be marked as spam.
  2. Messages that are already tagged  as {Spam}, or a similar phrase, at the beginning of the Subject line of the message.

To analyze a missed spam message and create rules to trap it in the future we need to receive an exact, unaltered copy of the original message in a specific format. There are two ways for you to submit such a message for analysis.

If you received the original spam message (not a forwarded copy) you can view the full headers of the email to find the Message ID.  How you view the full email headers depends on the application you use to read email. A very good article on how to view and understand email header can be found here, How to Read and Analyze the Email Header Fields.

Note that the original recipient can forward a spam to you in such a way that will  preserve the original headers. They must open a new email and the drop and drag a copy of the spam into that empty email the send the message to you. Please see this article for more specific instructions: How do I include full headers when forwarding an email.

The Message ID can be found near the top of the full email header in a line that starts with Received. Below is an example of what the MessageID line will look like.

Return-Path: <>
Received: (qmail 20767 invoked by uid 399); 7 Feb 2014 13:29:24 -0000
X-Virus-Scan: Scanned by ClamAV 0.98 (no viruses);
Fri, 07 Feb 2014 07:29:24 -0600
Received: from (
by with ESMTP; 7 Feb 2014 13:29:24 -0000
Received: from (localhost.localdomain [])
by (8.13.8/8.13.8) with ESMTP id s17DCOp8009582

I have highlighted the Message ID, s17DCOp8009582, in the example above.

Once you have located the Message ID you can use the BarricadeMX Plus web interface to locate the Message Details Page for the spam message. Enter the Message ID in the text box at the top right hand side of any screen in the web interface and select the Go! button (please see the screen shot below).


This will bring up the Message details page for the spam message. Scroll to the bottom of the page and select the radio button next to This is SPAM. Then select the Submit button at the far right hand side of the screen. (please see the screen shot show below) and the message will be automatically sent to our Spam Analyzer and added to the Bayesian Database queue to be learned as spam.



Another way to find and submit missed spam is to use the web interface to navigate to: Reports >> Run Reports to set up a custom report where: (see screen shot below).

The Date = The date the Spam was sent (YYYY-MM-DD format)
The Form address = From address of the spam:

The select the Submit button (please see the attached screen shot spam_ss3) . This will bring up a list of all the messages that match the Date and From selection criteria. Next simply click on and line in the Report that contain the spam message and you will be directed to Message Details Page for the message. Now scroll to the bottom of the page to report the message as spam as described above (please see above screen shot).

Messages that are submitted to us are periodically reviewed after analysis and if rules can be created to trap these messages they are pushed out to all customers.



About the Author