Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Spam filter not blocking domain (Spam filter custom rules)
  •  
PositiveMojo

Messages: 8
Karma: 0
Send a private message to this user
We keep getting spam from a Chinese group in Taiwan and the spam filter is not blocking them. The FROM is

From: "lelandha56" <lelandha56<_at_>yahoo.com.tw>

The current rule that blocks the domain is below but does not seem to be working:

Header: From
Type: contains domain
Content: yahoo.com.tw
Treat the message as spam and reject it

Mail from this domain is not being rejected. Any ideas?
  •  
blackbox

Messages: 82
Karma: 0
Send a private message to this user
What does the email header look like on messages that make it through?
  •  
PositiveMojo

Messages: 8
Karma: 0
Send a private message to this user
Hi blackbox - thanks for responding! Here is the entire header:

Return-Path:
<sentto-75881686-26-1315379436-pam=ftiglobal.com<_at_>returns.groups.yahoo.com >
X-Spam-Status: No, hits=1.7 required=5.0
tests=AWL: -0.838,BAYES_50: 1.567,HTML_FONT_FACE_BAD: 0.884,
HTML_FONT_LOW_CONTRAST: 0.124,HTML_FONT_SIZE_LARGE:
0.001,HTML_MESSAGE: 0.001,
RDNS_NONE: 0,TOTAL_SCORE: 1.739,autolearn=no
X-Spam-Level: *
Received: from n44b.bullet.mail.sp1.yahoo.com ([66.163.168.158])
by mail.ftiglobal.com (Kerio Connect 7.0.1)
for pam<_at_>ftiglobal.com;
Wed, 7 Sep 2011 02:10:58 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoogroups.com; s=lima; t=1315379436; bh=KrUmw0yTqXmBVqQiUwk1EgaS2l0zqfhGw8uuuSiaKvk=;
h=Received:Received:X-Yahoo-Newman-Id:X-Sender:X-Apparently- To:X-Received:X-
Received:X-Received:X-Received:X-Received:To:Message-ID:User -Agent:X-Mailer:
X-Originating-IP:X-eGroups-Msg-Info:X-Yahoo-Post-IP:From:X-Y ahoo-Profile:Sen
der:MIME-Version:Mailing-List:Delivered-To:List-Id:Precedenc e:List-Unsubscri
be:Date:Subject:Reply-To:X-Yahoo-Newman-Property:Content-Typ e;
b=jy4YDjPvyA17PCzIJaWkd4xl/jysicwErHROZvGZbhsyW3WQ0Q7fQM62gt nOu0nzMZ3m+ZZnf1
t1baZF8l/Wzip8nP8nQmw9MtLZBktt3wMGdss71m+QsJBVrQeRf1Fo
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=lima; d=yahoogroups.com;

b=VxYiHFDhK9Ceg7qHLVsv7xAt8DFJAxMT126I2crW40JqLgeySeeaPprfTY uJ6u75yWfVCcDhR+
VQpCAq8YjrGztEDYydrsPRKS5Rn7g4KK5bOexdMoWAzjhhRrRUqlvv;
Received: from [69.147.65.147] by n44.bullet.mail.sp1.yahoo.com with NNFMP;
07 Sep 2011 07:10:36 -0000
Received: from [98.137.35.157] by t10.bullet.mail.sp1.yahoo.com with NNFMP;
07 Sep 2011 07:10:36 -0000
X-Yahoo-Newman-Id: 75881686-m26
X-Sender: lelandha56<_at_>yahoo.com.tw
X-Apparently-To: bieyj<_at_>yahoogroups.com
X-Received: (qmail 37465 invoked from network); 7 Sep 2011 07:10:35 -0000
X-Received: from unknown (98.137.34.45)
by m7.grp.sp2.yahoo.com with QMQP; 7 Sep 2011 07:10:35 -0000
X-Received: from unknown (HELO n45b.bullet.mail.sp1.yahoo.com)
(66.163.168.159)
by mta2.grp.sp2.yahoo.com with SMTP; 7 Sep 2011 07:10:35 -0000
X-Received: from [69.147.65.171] by n45.bullet.mail.sp1.yahoo.com with NNFMP; 07 Sep 2011 07:10:35 -0000
X-Received: from [98.137.34.35] by t13.bullet.mail.sp1.yahoo.com with NNFMP;
07 Sep 2011 07:10:35 -0000
To: bieyj<_at_>yahoogroups.com
Message-ID: <j475d9+k4nj<_at_>eGroups.com>
User-Agent: eGroups-EW/0.82
X-Mailer: Yahoo Groups Message Poster
X-Originating-IP: 66.163.168.159
X-eGroups-Msg-Info: 1:6:0:0:0
X-Yahoo-Post-IP: 203.113.113.18
From: "lelandha56" <lelandha56<_at_>yahoo.com.tw>
X-Yahoo-Profile: lelandha56
Sender: bieyj<_at_>yahoogroups.com
MIME-Version: 1.0
Mailing-List: list bieyj@yahoogroups.com; contact bieyj-owner<_at_>yahoogroups.com
Delivered-To: mailing list bieyj<_at_>yahoogroups.com
List-Id: <bieyj.yahoogroups.com>
Precedence: bulk
List-Unsubscribe: <mailto:bieyj-unsubscribe<_at_>yahoogroups.com>
Date: Wed, 07 Sep 2011 07:10:33 -0000
Subject: [bieyj] =?big5?B?ssQ3pU5IRKqpuXG1+LVMvVi0ziAzuFWt0621vNa5?=
=?big5?B?caV4bXNu?=
Reply-To: bieyj<_at_>yahoogroups.com
X-Yahoo-Newman-Property: groups-email-ff-u
Content-Type: multipart/alternative;
boundary="1-3559217922-3192853568=:9"
  •  
freakinvibe

Messages: 1552
Karma: 62
Send a private message to this user
That works for me. I have many "From" rules.

Have you tried the "contains substring" or "contains address" conditions? This should really work.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
blackbox

Messages: 82
Karma: 0
Send a private message to this user
The email headers look like your rule should be working.

I must have bumped into the same issue you're describing, as I actually have the same exact rule already configured.

Generally I use from/contains domain logic, but in this particular case the rule is from/contains substring/yahoo.com.tw/reject.
  •  
PositiveMojo

Messages: 8
Karma: 0
Send a private message to this user
Thanks blackbox. I've made the change and hope that it works. If not I'll make another post but this should do it.
Previous Topic: smartphone push problem
Next Topic: Outllook 2011 error
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sat Nov 18 03:56:16 CET 2017

Total time taken to generate the page: 0.00490 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.