I received an unusual message which I'm still working on, but noticed that the Spam Output score was 1:5 I know that 1 stands for clean, but 5 is spam and will be sent to junk file. My question is when I see this info do I just look at the first number which would be 1, correct? SpamDiagnosticOutput: 1:5 SpamDiagnosticMetadata: Default:4
In online Exchange class MS is offering the instructor shared with us the SCL chart (bellow). I'm guessing that 1:5 means the message had a SCL of 1 out of 5, which meant that it ok to be delivered. Am I correct in my thinking?
Spam Confidence Levels (SCL) As incoming messages go through spam filtering, they are assigned a spam score. This score maps to an SCL, as recorded in the X-header. SCL Rating Interpretation Default Action -1 Message comes from safe sender, safe recipient, or safe IP address Deliver to Inbox 0, 1 Message scanned and found to be clean Deliver to Inbox 5, 6 Spam Send to Junk Email 9 High confidence spam Send to Junk Email Exchange Online Protection does not use SCL levels 2, 3, 4, 7, and 8. You can use spam filtering policies to specify what happens with high confidence spam; for example, deleting the message and not sending it to junk mail. You can also set SCL conditions in transport rules.