Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Recommended Blacklist Servers (Need a list)
  •  
glazarte

Messages: 10
Karma: 0
Send a private message to this user
Hello,
Spam have increase and since Reverse DNS seems to be not working any more in our version of Kerio 6.7.3.

1. Any way to get Reverse DNS back to work.

2. Do you have a recommended list of servers. This is what we are using so far:

blackholes.five-ten-sg.com
dnsbl.sorbs.net
rhsbl.sorbs.net
bl.spamcop.net
sbl.spamhaus.org
xbl.spamhaus.org

Thanks
  •  
TorW

Messages: 769
Karma: 9
Send a private message to this user
glazarte wrote on Thu, 04 February 2010 16:31

sbl.spamhaus.org
xbl.spamhaus.org


Drop these two and use zen.spamhaus.org instead. The Zen zone also includes pbl.spamhaus.org (dynamic IP space mostly) which is responsible for over 50% of our DNSBL hits. I generally found the SORBS lists to be useless, but your mileage may vary.
  •  
glazarte

Messages: 10
Karma: 0
Send a private message to this user
Hello,

Thanks for the recomendation, I added the blacklist to block if found and not to ask directly. I still get the same amount of SPAM email.

Are there any setting that work the best to control SPAM now that reverse DNS is not available any more.

Thanks
  •  
TorW

Messages: 769
Karma: 9
Send a private message to this user
Here's our spam filter settings:

For outright rejecting:
psbl.surriel.com
zen.spamhaus.org
bl.spamcop.net

For a slight spamscore increase
dnsbl-1.uceprotect.net
dnsbl-2.uceprotect.net
db.wpbl.info
ubl.unsubscore.com
korea.services.net

These lists typically adds between 1 and 3 points to the score.



  • SPF checks are enabled and adds to the score when it fails
  • Everything is checked against SURBL
  • Spam repellent is turned on with a delay of 15 secs. About 10% of our rejects are because of the spam repellent
  • Every rejected spam is copied to a public folder. The spams are manually weeded and dragged to the Junk Mail Folder several times a day. This keeps the Bayes filter in better shape than relying on autolearn only
  • Tag score is 4.7, block score is 9.0
  • We have a large set of inhouse SpamAssassin rules which both adds and subtracts spamscore. We use them on several servers.
  • Some of the built-in SA rules have had their scores adjusted. E.g. BAYES_99 now scores 5.4 points and all the URL rules score (much) higher than default.
  • Extensive whitelists in SpamAssassin
  • A central SMTP gateway in front of most mail servers.
  • User training and information (FAQs etc.)


Having a good spam filter is quite a lot of work and the mail stream needs constant attention. There is, unfortunately, no such thing as an automatic spam filter which works forever. We are lucky enough to have resources to spend on email (one of our key products), but it may not necessarily be the case elsewhere.

Look at the source of spam that slips through and find out why, then go from there. Can you post the headers from one of your spams?
  •  
freakinvibe

Messages: 1479
Karma: 55
Send a private message to this user
In addition to the BLs that TorW listed we use

b.barracudacentral.org

with a score.

Dexion AG - The Blackberry Specialists in Switzerland
http://www.dexionag.ch
  •  
irow

Messages: 56
Karma: 4
Send a private message to this user
TorW, your post is extremely helpful. Smile Can you please clarify what you mean by the following points:


Quote:
Everything is checked against SURBL

How do you configure Kerio to check against SURBL?
Quote:
Every rejected spam is copied to a public folder. The spams are manually weeded and dragged to the Junk Mail Folder several times a day. This keeps the Bayes filter in better shape than relying on auto learn only.

Do you use a separate email account for this?
Quote:
Some of the built-in SA rules have had their scores adjusted. E.g. BAYES_99 now scores 5.4 points and all the URL rules score (much) higher than default.

What is a BAYES_99 and built-in SA rule?

Thank you for clarifying if possible.

[Updated on: Tue, 18 February 2014 17:36]

  •  
freakinvibe

Messages: 1479
Karma: 55
Send a private message to this user
Quote:
How do you configure Kerio to check against SURBL?

This is by default switched on. It can be switched off (and on) on the "SpamAssassin" tab in the "Spam Filter" section.

Dexion AG - The Blackberry Specialists in Switzerland
http://www.dexionag.ch
  •  
Pbohm

Messages: 1
Karma: 0
Send a private message to this user
Is there any updates to the ones that are above or are they still valid?
  •  
freakinvibe

Messages: 1479
Karma: 55
Send a private message to this user
They are still valid. You can also look here for a comparison:

http://www.intra2net.com/en/support/antispam/


Dexion AG - The Blackberry Specialists in Switzerland
http://www.dexionag.ch
Previous Topic: 1 of 3 devices missing email
Next Topic: Mail list & domain alias
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sun Jan 22 17:20:14 CET 2017

Total time taken to generate the page: 0.01766 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.