Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Getting killed by spam - need ability to do body
  •  
mergy

Messages: 30
Karma: 0
Send a private message to this user
Please give me the ability to do message body rules on patterns to kill off the massive mess that is AWPL spam

Jonathan
  •  
Kerio_ktrumbull

Messages: 597
Karma: 2
Send a private message to this user
  •  
mergy

Messages: 30
Karma: 0
Send a private message to this user
Done.

Can other users chime in to provide some 'feedback' to Kerio. Of course, I know Kerio's top priority is an offline abilities for the Outlook Connector but allowing us to have the basic ability we would have if we had direct access to the SpamAssassin conf files would be fine. If admins don't want to do there and handle direct config, great, but if you do to pick-off message body patterns, you should be able to do so.


Jonathan
  •  
mergy

Messages: 30
Karma: 0
Send a private message to this user
Oh - and here is the link to the KOC Offline Thread stating it was Kerio's top-priority from Oct 31-ish 2005.

http://forums.kerio.com/index.php?t=msg&th=7534&star t=0&S=28dd5f381b602098cf96a34dc4f3a904


Jonathan
  •  
mergy

Messages: 30
Karma: 0
Send a private message to this user
And here is why I just didn't ask for the feature in the first place.

--------------------

Hi Jonathan,

Unfortunately this functionality is not currently available, but we do have a suggestion on file for this. We will add your request for this feature to our suggestion database. Please note we do not have a time frame on if or when this feature may be available.

Regards,
Kevin Trumbull
Kerio Technical Support
http://support.kerio.com

Jonathan
  •  
mergy

Messages: 30
Karma: 0
Send a private message to this user
Forget it -

I am testing a way to use spamassassin rules now. It seems to be working fine with body rules on existing .cf files in

/opt/kerio/mailserver/plugins/spamassassin/rules (on RHEL)

I will have a formal way to do it shortly.

Anyone who wishes to do more with rules than the Kerio admin GUI allows and is comfy with vi, contact me since Kerio does want to help on this.


Jonathan
  •  
mergy

Messages: 30
Karma: 0
Send a private message to this user
Yep - works. Can be done outside of the Kerio GUI.

Now, why can't Kerio just say it is possible but we don't support it and you need to know something about SA rules, etc. and actually use the functions of SA as a POSITIVE to allow us to better use their products and allow us to solve problems with their software?

Anyway, can be done and killing all the dreaded APWL stock emails that sneak past the bayes as I write.


Jonathan
  •  
tpalmer

Messages: 61
Karma: 0
Send a private message to this user
This has been discussed a couple of times in the forum, and Kerio's policy was stated - http://forums.kerio.com/index.php?t=msg&goto=40358&S =50958d4a978a3710d0d92111bbb34455&srch=local.cf#msg_4035 8
(search the forum on "local.cf")

but, in the end, working directly w/ the rules and local.cf does work, although you'll need to restart the server, and all changes *WILL* get overwritten on KMS upgrade. I don't know that added files (like SARE rulesets, or custom rulesets) will get overwritten, but local.cf and the standard rulesets certainly will.
  •  
mergy

Messages: 30
Karma: 0
Send a private message to this user
Yes - very nice. All our users are very happy and I am happy that I can do body checks for spam without creating a funky postfix/SA relay system.

Since Kerio does something to handle the custom rulesets for the admin utility for subject-line, it should be trivial for them to add the ability for body checks too.

Of course, I wouldn't want them to dilute all the resources they are putting on the Outlook offline connector they have been working on for over a year now.

Jonathan
  •  
Kerio_ktrumbull

Messages: 597
Karma: 2
Send a private message to this user
Jonathan,

It is very important that you submit a support ticket for each feature request you have. We prioritize our feature requests by the number of requests we get from customers. By you submitting a ticket, you helped to increase the priority of that feature request.

Kevin Trumbull
Kerio Technical Support Team Leader
http://support.kerio.com
  •  
Travis431

Messages: 19
Karma: 0
Send a private message to this user
I'm interested in your findings please email me at admin<.a.t.>met-con.com

Thanks

Travis
  •  
rleslie

Messages: 23
Karma: 0
Send a private message to this user
you could get a separate appliance that filter your spam.

we use the barracuda spam firewall...it runs about $4000. Works ok. Reliable, still doesn't bock everything i think it should, but not bad.

There's also borderware firewalls...don't have much experience with them but have heard good things about them.

There is also 3rd party services that will filter your email like postini.

I don't know if i would depend on my email server to do all of the spam filtering.

just my thoughts.
  •  
linuxbox

Messages: 139
Karma: 0
Send a private message to this user
is there a tutorial or anything on the forum that can show what files to modify in the spamassassin folder to set custom rules that search the body of an email so as to filter custom phrases and urls etc etc? must you create seperate .cf files and if so is that all one must do?
thanks!
  •  
freakinvibe

Messages: 1553
Karma: 62
Send a private message to this user
Modifying Spamassassin .cf files can cause headaches as it is complex. What I did with my KMS installation, I dropped additional .cf files in the rules folder, they work very well for me:

70_sare_adult.cf

70_sare_stocks.cf

72_sare_bml_post25x.cf

They are killing nearly all my stock and adult spam. You can get them at rulesemporium.com. You have to inspect every file before you use it with Kerio in order to prevent double rating, but these three are fine for me.

Just drop them in the rules directory and restart Kerio. They might get deleted when you upgrade KMS, so you could store them in a second location for backup.

[Updated on: Thu, 26 July 2007 09:02]


Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
linuxbox

Messages: 139
Karma: 0
Send a private message to this user
freakinvibe wrote on Thu, 26 July 2007 02:01

Modifying Spamassassin .cf files can cause headaches as it is complex. What I did with my KMS installation, I dropped additional .cf files in the rules folder, they work very well for me:

70_sare_adult.cf

70_sare_stocks.cf

72_sare_bml_post25x.cf

They are killing nearly all my stock and adult spam. You can get them at rulesemporium.com. You have to inspect every file before you use it with Kerio in order to prevent double rating, but these three are fine for me.

Just drop them in the rules directory and restart Kerio. They might get deleted when you upgrade KMS, so you could store them in a second location for backup.


sounds good. what does the beginning of the filename have to do with anything? like the 70_ and 72_ ??
does the naming convention mean anything to spamassassin?

what also works is this:
just edit 20_phrases.cf and at the end i added something like this:

###MY ENTRIES##################

body KIRYAMZZ_ORG /KIRYAMZZ_ORG/i
describe KIRYAMZZ_ORG More porn spam

body GREETING_CARD /We hope you enjoy your awesome card/i
describe GREETING_CARD Greeting card junk


then i edit 50_scores.cf and added this:

score KIRYAMZZ_ORG 30
score GREETING_CARD 30

after doing that i didn't restart kerio or anything and this blocked anything in the body that had those two phrases.
seems pretty simple actually. i like the fact that you can create regular expressions to defeat much of this spam and i use regexbuddy 3 to create complex regular expressions. maybe this is not the appropriate way to get this done but from what i'm seeing, it works. let me know what you think.
thanks!!

Previous Topic: Custom Forms in Outlook
Next Topic: Compound Filters AND or AND NOT
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Thu Nov 23 06:46:13 CET 2017

Total time taken to generate the page: 0.00516 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.