Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » IP Whitelisted, but still spam?
  •  
BudDurland

Messages: 348

Karma: 10
Send a private message to this user
Imagine my surprise when a message from someone that is in my IP White list was still marked as spam after spam assassin got done with it. How to I tell kerio that white listed really means "completely" white listed?

Good is better than evil because it's nicer
--Mammy Yokum
  •  
freakinvibe

Messages: 1553
Karma: 62
Send a private message to this user
How did you whitelist the IP address? What did you do exactly?

You should create a custom IP Address Group that contains all the addresses you want to whitelist. I called mine

"Trusted Mail Servers"

Then you must enter that group in

Configuration > Content Filter > Spam Filter > Blacklists

under "Custom whitelist of IP addresses"

Then, you must go to

Configuration > Content Filter > Spam Filter > Spam Rating

and un-tick

"Enable rating of messages sent from trustworthy relay agents defined in SMTP relay options"

Of course, you must have the "Trusted Mail Servers" set in the Relay Control options.



Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
BudDurland

Messages: 348

Karma: 10
Send a private message to this user
freakinvibe wrote on Wed, 04 February 2009 04:29

How did you whitelist the IP address? What did you do exactly?

You should create a custom IP Address Group that contains all the addresses you want to whitelist.


Yup, did that.

Quote:

Then you must enter that group in

Configuration > Content Filter > Spam Filter > Blacklists

under "Custom whitelist of IP addresses"


Did that too

Quote:

Then, you must go to

Configuration > Content Filter > Spam Filter > Spam Rating

and un-tick

"Enable rating of messages sent from trustworthy relay agents defined in SMTP relay options"


Did that too.

Quote:

Of course, you must have the "Trusted Mail Servers" set in the Relay Control options.


I did not do this; only my local lan is allowed to relay. I didn't think it would be needed -- any "outside" mail server that is delivering mail to a user on my mail server is not relaying.



Good is better than evil because it's nicer
--Mammy Yokum
  •  
jshaw541

Messages: 462
Karma: 0
Send a private message to this user
freakinvibe wrote on Wed, 04 February 2009 01:29

How did you whitelist the IP address? What did you do exactly?

You should create a custom IP Address Group that contains all the addresses you want to whitelist. I called mine

"Trusted Mail Servers"

Then you must enter that group in

Configuration > Content Filter > Spam Filter > Blacklists

under "Custom whitelist of IP addresses"

Then, you must go to

Configuration > Content Filter > Spam Filter > Spam Rating

and un-tick

"Enable rating of messages sent from trustworthy relay agents defined in SMTP relay options"

Of course, you must have the "Trusted Mail Servers" set in the Relay Control options.






The whitelisting doesn't work this way. I've just discovered this sad, hard reality.

The "Custom whitelist of IP addresses" only overrides the blacklisting functionality. It does not seem to alter the SpamAssassin functionality.

Kerio MailServer 6.7.1 w/AD
Windows Server 2003 SP 1
Dell PowerEdge 2850 (Dual Xeon 3.2ghz and 2 GB RAM)
~1300 users
~1000+ concurrent IMAPS connections
iPhone users
Outlook 2007 KOFF users
Apple iCal 10.5/10.6 users
  •  
freakinvibe

Messages: 1553
Karma: 62
Send a private message to this user
Quote:

only my local lan is allowed to relay

If your "Trusted Relay Servers" list doesn't match your "Whitelisted Servers" list then you can use the following trick. Go to

Configuration > Content Filter > Spam Filter > Blacklists

Enter the "Whitelisted Servers" to the Custom Blacklist of spammer IP addresses (yes, sounds weird, but wait). Now set the "Add Spam score" to -9.0.

Not very nice, but does the trick.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
jshaw541

Messages: 462
Karma: 0
Send a private message to this user
freakinvibe wrote on Wed, 04 February 2009 23:17

Quote:

only my local lan is allowed to relay

If your "Trusted Relay Servers" list doesn't match your "Whitelisted Servers" list then you can use the following trick. Go to

Configuration > Content Filter > Spam Filter > Blacklists

Enter the "Whitelisted Servers" to the Custom Blacklist of spammer IP addresses (yes, sounds weird, but wait). Now set the "Add Spam score" to -9.0.

Not very nice, but does the trick.


I was trying to think up some hack like this. This is brilliant, thanks!

Kerio MailServer 6.7.1 w/AD
Windows Server 2003 SP 1
Dell PowerEdge 2850 (Dual Xeon 3.2ghz and 2 GB RAM)
~1300 users
~1000+ concurrent IMAPS connections
iPhone users
Outlook 2007 KOFF users
Apple iCal 10.5/10.6 users
  •  
BudDurland

Messages: 348

Karma: 10
Send a private message to this user
freakinvibe wrote on Thu, 05 February 2009 02:17

If your "Trusted Relay Servers" list doesn't match your "Whitelisted Servers" list then you can use the following trick. Go to

Configuration > Content Filter > Spam Filter > Blacklists

Enter the "Whitelisted Servers" to the Custom Blacklist of spammer IP addresses (yes, sounds weird, but wait). Now set the "Add Spam score" to -9.0.

Not very nice, but does the trick.


Cool trick, except then I can have an active IP blacklist. OTOH, I'm not sure there's much benefit to having one.

Good is better than evil because it's nicer
--Mammy Yokum
Previous Topic: Restrict Bayes training to specific users?
Next Topic: Email Attachment is Remove
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Tue Nov 21 18:12:03 CET 2017

Total time taken to generate the page: 0.00388 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.