Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » spam
  •  
skeates

Messages: 104
Karma: 0
Send a private message to this user
Hi All.

After some advice regarding spam. Kerio seems to be doing a good enough job of blocking off spam for one of my client's, but this is partly the problem I believe.

When kerio starts getting hit with a lot of it mail server just can't handle it. I start getting webmail time outs if it's really bad I get entourage timing out from the server. We manage to reduce the incoming spam by about 50% by going through dyndns with one of there spam filters. This helped a lot, but we are still getting problems.

I can go external and use something like message labs to filter out, but the client is going to have to pay for this service which is already provided by kerio it's self (it's just not working efficiently).

Does any one know if there are any decent open source spam filters I can run localy on my network. So that I can direct all the mail through it and then onto the mail server. Basicaly creating a buffer. Possibly a thought for the future for Kerio to separate out the spam filter so that the mail server is not lagged by the filter.

Any ideas would be great

Thanks
  •  
p0ddie

Messages: 242
Karma: -3
Send a private message to this user
  •  
skeates

Messages: 104
Karma: 0
Send a private message to this user
Thanks for that. I had a look at the barracuda and it will probably do what I want. Problem is price though I personally don't think it is expensive, but trying to convince a client to purchase it will be another problem that needs solving.

I had a hunt around and came across http://www.piratefish.org/ which I setup over the weekend to test on my home test mail server. So far it is working as far as receiving mail, but I need to get some spam coming in. Thats not to hard and will test that this week.
  •  
jamesf

Messages: 119
Karma: 2
Send a private message to this user
We have been using Securence for inbound mail filtering for 3+ years and I am extremely happy with it. I have had to retrieve email because of a false positive no more that 5 times in that 3+ years. Because Securence has been doing such a good job I turned off Kerio's anti-spam.

http://www.securence.com/
  •  
freakinvibe

Messages: 1531
Karma: 60
Send a private message to this user
Have you tried to find out which part of the Anti-Spam is stressing the server? Is it the Blacklists (normally very low foot print) or the Spam Assassin (more load as it needs to scan the whole mail body). Or is it the Anti-Virus that is putting load on your system?

Try to selectively switch on and off those services to find out which one is the culprit.

You should also do some performance monitoring on your server. Is the CPU, the disk IO or the NIC the bottleneck?

Before jumping to a third-party solution (that also has its disadvantages) I would really analyse what the problem really is.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
jamesf

Messages: 119
Karma: 2
Send a private message to this user
freakinvibe, you state, "Before jumping to a third-party solution (that also has its disadvantages". Would you please list some of the disadvantages so others can make an informed decision if they decide to investigate third party options?
  •  
freakinvibe

Messages: 1531
Karma: 60
Send a private message to this user
Yes, sure.

With a third-party solution you lose the ability to:

  1. check the IP address of the connecting server
  2. tell the sending server that the user doesn't exist and reject the e-mail directly
  3. having the mail logs in a single location

For some of these points there are remedies like LDAP lookups for point 2, but they need additional config work and maintenance.

Troubleshooting message flow is more difficult as you have to check two devices. There is also an additional point of failure.

I am not against mail gateways, but first you should check (before you pay money for another device) if you can't solve your problem with the solution you have already paid for. Maybe it is just a mis-configuration.

[Updated on: Tue, 10 August 2010 16:55]


Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
jamesf

Messages: 119
Karma: 2
Send a private message to this user
freakinvibe, good info.

Thanks.
Previous Topic: Problems with anti spam (configuration)
Next Topic: Upgrade to Kerio Connect 7.1
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Mon Sep 25 17:09:21 CEST 2017

Total time taken to generate the page: 0.00422 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.