Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Kerio 7.4 Update lots of email being tagged as SPAM
  •  
bruggles

Messages: 125
Karma: 1
Send a private message to this user
Since the update to 7.4 last week we have seen a fair amount of email being falsely tagged as SPAM. I was curious if anyone else has seen this and if anyone has a solution.

TIA
  •  
bruggles

Messages: 125
Karma: 1
Send a private message to this user
I have attached the X-SPAM part of one of our emails, hoping this can provide info to someone that might know why the SPAM filter is marking HAM as SPAM. Thanks

X-Spam-Status: Yes, hits=4.0 required=4.0
tests=AWL: -1.400,BAYES_50: 1.567,HTML_MESSAGE: 0.001,
T_URIBL_BLACK_OVERLAP: 0.01,T_URIBL_SEM: 0.01,T_URIBL_SEM_FRESH: 0.01,
T_URIBL_SEM_FRESH_10: 0.01,T_URIBL_SEM_FRESH_15: 0.01,T_URIBL_SEM_RED: 0.01,
URIBL_BLACK: 1.725,URIBL_RHS_DOB: 1.514,URIBL_SC_SURBL: 0.568,
TOTAL_SCORE: 4.035,autolearn=no
X-Spam-Flag: YES
X-Spam-Level: ****
  •  
pal

Messages: 57
Karma: 2
Send a private message to this user
Just look at the items with the most points:
* BAYES_50: This is a matter of training, move the mails from junk to inbox or any other non junk folder.
* URIBL_BACK: The IP in question is on a blacklist, they will have problems with many mail servers. Check the IP with common RBL checkers to get more information!
* URIBL_RHS_DOB: The Domain in question is only a few days old, common for spam runs.
* URIBL_SC_SURBL: The Mail in question provided a url to a common spam site.

Check the last 3 entries and see for yourself if Spamassassin works right or not.

Last recommendation, look at the total score and your spam threshold, with a little adjustment of your threshold by .1 you can let this mail trough.
  •  
reiber9

Messages: 7
Karma: -2
Send a private message to this user
Hello

after the update to 7.4 we have the same problem. In-house mail will be tagged as spam. Before the update, we had no problems with incorrectly labeled mail
  •  
MacLab

Messages: 229
Karma: 14
Send a private message to this user
You could raise your spam threshold so that it doesn't mark email as spam until a higher score.

MacLab, Inc.
Kerio Certified Partner, Reseller, Hosting Provider, Kerio Connect Certified.
http://maclaboratory.com
  •  
freakinvibe

Messages: 1553
Karma: 62
Send a private message to this user
As I have written in this thread

http://forums.kerio.com/t/21882/all-messages-tagged-with-bay es-99-after-upgrade-to-7-4/

Bayes scores are unusually high. As Spamassassin was upgraded, maybe something with the Bayes DB went wrong. In the end, I have deleted the DB and my system is now learning again. I will see if it works better once it has reached the 200/200 threashold.

In your case, I would use 5.0 as a trigger for Spam, which is the recommended value for Spamassassin.

And yes, the e-mail you sent the header of, triggered some black lists, especially the

Quote:
URIBL_BLACK: 1.725


should be a concern. This means that a link in the e-mail is pointing to a spammy web site.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
rfrazee

Messages: 4
Karma: 0
Send a private message to this user
I'm experiencing the same thing. Incoming email that a few weeks ago was getting a SPAM score of "0" is now "4" from the same email address and domain. Also, undelivered outgoing mail both internal clients and external clients.
  •  
freakinvibe

Messages: 1553
Karma: 62
Send a private message to this user
What has helped me, is the following. After seeing a unusual high Spam score, I have deleted the Bayes DB and it has started learning from zero again. It has now reached the 200 threshold and is active again. Bayes scores are now much more accurate than after the upgrade from 7.3 to 7.4.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
rfrazee

Messages: 4
Karma: 0
Send a private message to this user
I did delete the Bayesian learn database and started a new one. Things seem to be working much better now. Thanks for the help and suggestions everyone.
  •  
jensonyu

Messages: 19
Karma: 0
Send a private message to this user
Where is the database to be deleted? I don't see it in the manual.
  •  
Pavel Dobry (Kerio)

Messages: 5245
Karma: 251
Send a private message to this user
jensonyu wrote on Tue, 15 May 2012 19:04
Where is the database to be deleted? I don't see it in the manual.


Store/spamassassin/bayes

[Updated on: Tue, 15 May 2012 20:10]

  •  
freakinvibe

Messages: 1553
Karma: 62
Send a private message to this user
How to reset the Kerio Bayes DB:

http://swildow.darktech.org/wp/?p=648


Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
Previous Topic: Thread index visible in reply
Next Topic: Upgrade KCB from 7.3->7.4, BESX recache?
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Mon Nov 20 23:54:52 CET 2017

Total time taken to generate the page: 0.00528 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.