Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » SPAM rules to block messages from internal domain from external source
  •  
syntaxcollector

Messages: 7

Karma: 0
Send a private message to this user
We are starting to receive spam messages to our users from 'our users' We will receive messages sent by a 3rd party SMTP server but claim that they're 'from' the user that is also the recipient. I would like to create a SPAM rule that states any messages sent 'from' a user<_a.t_>ourdomain.com to ourdomain.com from any IP other than our SMTP should be automatically flagged as SPAM.

Does any one have any suggestions on how I go about this?

Thank You.

Using a mac is a little different then using a pc. Its not so much operating a computer as it is tricking it, fooling it into what you want it to do. You kinda have to sneak up on a mac.
  •  
Pavel Dobry (Kerio)

Messages: 5245
Karma: 251
Send a private message to this user
The best way is to define SPF and Caller-ID records for your domain in DNS and then configure KMS to penalize (add score or reject) emails with invalid SPF and Caller-ID match. This way you can easily find all messages that were send by spammers and which contain fake From address pretending to be sent from your email domain.
  •  
feijin

Messages: 24
Karma: 0
Send a private message to this user
Kerio_pdobry wrote on Tue, 23 December 2008 18:08

The best way is to define SPF and Caller-ID records for your domain in DNS and then configure KMS to penalize (add score or reject) emails with invalid SPF and Caller-ID match. This way you can easily find all messages that were send by spammers and which contain fake From address pretending to be sent from your email domain.


if you mailserver is emua.net
please try it:
helo yourcomputername


Tiger# telnet webmail.emua.net 25
Trying 75.149.45.65...
Connected to webmail.emua.net.
Escape character is '^]'.
220 webmail.emua.net ESMTP ready
HELO youcomputername
250 webmail.emua.net
MAIL FROM: carlos<_a.t_>emua.net

RCPT TO: carlos<_a.t_>emua.net
250 2.1.5 Recipient <carlos<_a.t_>emua.net> ok
DATA
354 Enter mail, end with CRLF.CRLF
From: carlos<_a.t_>emua.net
Subject: Buy my stuff!!! V|4gra
spamer!!!
  •  
Previous Topic: Posting to a Public Folder
Next Topic: Control Spam....from yourself???
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sun Nov 19 15:10:38 CET 2017

Total time taken to generate the page: 0.00454 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.