Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » [Done]how to block spams which is from faked domain
  •  
iamcj

Messages: 70
Karma: 1
Send a private message to this user
For example, my domain is <_at_>abc.com, having a static ip address.

Always Received spams which fake to be xxx<_at_>abc.com, of course they are not sent from the correct ip, but different ones.

I want to set a rule, check the From domain, if it's <_at_>abc.com, and sender ip is not the correct one, block it.

Possible?

Thanks

[Updated on: Thu, 07 June 2012 04:57]

  •  
Kedar

Messages: 1320
Karma: 48
Send a private message to this user
  •  
iamcj

Messages: 70
Karma: 1
Send a private message to this user
which should be used?
Caller-ID or SPF? or both?

Thanks
  •  
freakinvibe

Messages: 1553
Karma: 62
Send a private message to this user
I would use SPF, it is easy to implement and puts less load on the server.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
iamcj

Messages: 70
Karma: 1
Send a private message to this user
i added txt record in dns
enabled the spf check, set to add 1 score to spam scores
but by viewing the source of fake-domain spam mail, i cannot see the 1-score added by spf check...
  •  
freakinvibe

Messages: 1553
Karma: 62
Send a private message to this user
You also have to switch on SPF in the Spam section of the Admin Console.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
iamcj

Messages: 70
Karma: 1
Send a private message to this user
"enabled the spf check, set to add 1 score to spam scores", this is set in Kerio
  •  
freakinvibe

Messages: 1553
Karma: 62
Send a private message to this user
OK, then please post the exact contents of your TXT record.

You can also enable SPF on the debug log to see exactly what happens and post the relevant log entries here.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
iamcj

Messages: 70
Karma: 1
Send a private message to this user
服务器: google-public-dns-a.google.com
Address: 8.8.8.8

非权威应答:
hztrust.com text =

"v=spf1 ip4:101.68.88.3 ip4:101.68.88.3 ~all"
  •  
pal

Messages: 57
Karma: 2
Send a private message to this user
The tilde (~all) tells the spam checker to go easy on this rule, if everything works i would suggest you replace it with the more strict -all option.
Your SPF record states two times the same ip address, this souldn't be a problem but it is not necessary.

Take sure that you mailserver gets the correct SPF records for your own domain, check this local on the mailserver (e.g. "dig hztrust.com TXT"). This can be a issue if you use a local DNS Server for your own record!
  •  
freakinvibe

Messages: 1553
Karma: 62
Send a private message to this user
Try to change the TXT to

"v=spf1 ip4:101.68.88.3 -all"

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
iamcj

Messages: 70
Karma: 1
Send a private message to this user
changed dns server to 8.8.8.8
seems spf check works
I can see some pass, some fail, some unknown
Previous Topic: Calendar Items in Month View Missing
Next Topic: Public calendar on android?
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Mon Nov 20 18:00:59 CET 2017

Total time taken to generate the page: 0.00516 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.