Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Marking our own emails as spam (Kerio Connect marking our own mail as spam)
  •  
macjimbo

Messages: 103
Karma: 6
Send a private message to this user
Hi

It seems that KC is marking emails sent from within our own network as spam.

Specifically, all email sent from sales<_at_>ourdomainname seems to get marked as spam by KC, so the recipient receives an email with **SPAM** in the subject.

Spam rating: on
Enable rating from trustworthy relay agents: on
Whitelist IP group: includes 10.0.0.0/255.0.0.0 which covers our LAN
Internet blacklists: all off
No custom rules
SpamAssasin SURBL list: on
Caller ID: off
SPF: off
Spam repellent: on

Other email sent from users on the LAN appear to be untouched. But email from sales<_at_> - which is predominantly mailed automatically from a booking system on each user's computer - is all marked as spam.

Hope someone call help

Kerio Connect 6.4. Mac mini running OS X Server 10.6.8.

Cheers

James
  •  
TorW

Messages: 769
Karma: 9
Send a private message to this user
Whitelisting only concerns itself with DNSBL blocking. To get rid of the annoying string in the subject, turn off the spam rating for trustworthy relay agents. That is, if you can trust anything coming from the marketing department Wink

[Updated on: Wed, 13 June 2012 18:34]

  •  
macjimbo

Messages: 103
Karma: 6
Send a private message to this user
Thank you for this, I had assumed (always dangerous) that the whitelist would overrule all other options. Let's see how we get on.

Out of interest, what possible reason could there be for *every* single email from sales being marked as spam? They are all different types, all individually addressed to one email address with personal salutations and none of them 'look' spammy.

Thanks again

James
  •  
TorW

Messages: 769
Karma: 9
Send a private message to this user
It's impossible to say without looking at the bayes database (which you can't anyway on the Kerio Connect installation). I of course have no clue what the content of the mails are, but do you actually know what the recipients do with them? It's not uncommon for end users to flag newsletters as spam instead of unsubscribing from them, mostly because they can't remember subscribing to it or have no clue what all the funny checkboxes on the free download page meant.

Remember that SpamAssassin is all about statistics. If something else is correctly classified as spam, words and phrases ("tokens") from them will also increase the score when they're found in legitimate mails. This is the downside of the way Kerio have implemented SA in Kerio Connect; it's very hard to train the filter manually.

There's one thing you can do: check if the number of messages learned as spam is higher than the number of messages learned as not spam ("ham"). The ham number should ideally be 2-3 times higher than the spam number. Our numbers are roughly 226,000 spam and 881,000 ham. If the numbers are the other way around on your server, spam classification tends to be completely random.

In any case, if you exempt the market department's mails from spam filtering, the bayesian classifier tokens will eventually disappear from the database and you'll be in the clear.
  •  
freakinvibe

Messages: 1541
Karma: 62
Send a private message to this user
If you could post the header of such a mail, the reason for marking it as spam could be analyzed. The

X-Spam-Status:

header would be particularly interesting, it might look like this:

Quote:
X-Spam-Status: Yes, hits=7.0 required=5.0 tests=DNSBL_IX.DNSBL.MANITU.NET: 3.00, DNSBL_DNSRBL.SWINOG.CH: 2.00, AWL: 0.064, BAYES_00: -1.665, DCC_CHECK: 1.1, MPART_ALT_DIFF: 0.79, URIBL_BLACK: 1.725, TOTAL_SCORE: 7.028, autolearn=no


Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
mmccarn

Messages: 3
Karma: 0
Send a private message to this user
We started seeing the exact same behavior (most or all outgoing email marked "**SPAM**" in the subject) as soon as we installed the 7.4.1 build 7267 update (we're on OS X, too).

I cannot sufficiently express my disgust with Kerio for then telling me I would have to pay them to get help fixing the bug they had introduced in the software.

I suppressed the bogus "**SPAM**" subject tags by un-checking "enable rating of messages sent from trustworthy relay agents defined in SMTP relay options"
  •  
macjimbo

Messages: 103
Karma: 6
Send a private message to this user
Hi - thanks for your help with this. Here's the header. Hope it makes sense! Thanks. PS disgusted mmccar note that this is still 7.4.0 not 7.4.1...

Return-Path: <sales<_at_>ferry-marina.co.uk>
X-Spam-Status: Yes, hits=5.4 required=5.0
tests=AWL: 0.482,BAYES_99: 4.07,HTML_MESSAGE: 0.001,
HTML_MIME_NO_HTML_TAG: 0.377,MIME_HTML_ONLY: 0.001,MISSING_MID: 0.497,
T_REMOTE_IMAGE: 0.01,TOTAL_SCORE: 5.438,autolearn=no
X-Spam-Flag: YES
X-Spam-Level: *****
X-Footer: ZmVycnktbWFyaW5hLmNvLnVr
Received: from [10.0.0.188] ([10.0.0.188])
(authenticated user wavenamics<_at_>ferry-marina.co.uk)
by mail.ferry-marina.co.uk (Kerio Connect 7.4.0)
for archive<_at_>mail.ferry-marina.co.uk;
Wed, 13 Jun 2012 14:42:29 +0100
Mime-Version: 1.0
Content-Type: text/html;charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Date: Wed, 13 Jun 2012 14:42:29 +0100
To: archive<_at_>mail.ferry-marina.co.uk
From: "Horning Ferry Marina" <sales<_at_>ferry-marina.co.uk>
X-Original-Subject: Horning Ferry Marina - Booking confirmation BZTA15318-16657
Subject: **SPAM** Horning Ferry Marina - Booking confirmation BZTA15318-16657
  •  
freakinvibe

Messages: 1541
Karma: 62
Send a private message to this user
So the Bayes filter is the big problem. I had the same issue (for incoming mails as well), see this thread:

http://forums.kerio.com/t/21884/kerio-7-4-update-lots-of-ema il-being-tagged-as-spam/

So, I would suggest you delete the Bayes DB and you should be fine again.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
macjimbo

Messages: 103
Karma: 6
Send a private message to this user
Thank you for this, I've deleted the bayes folder although tbh it worked fine anyway when I turned off the spam rating for trustworthy relays. I have no relays so I've left this turned off.
  •  
Pavel Dobry (Kerio)

Messages: 5245
Karma: 251
Send a private message to this user
Actually, there must be a very special reason for checking local emails for spams. It has to be manually enabled in the Web Administration.
If your emails are generated in non-compliant email format (which is this case - missing Message-ID header, some problems in generated HTML part) then they can be easily marked as a spam.
So it is more a configuration issue (and email format problem) than a Bayes issue.
  •  
macjimbo

Messages: 103
Karma: 6
Send a private message to this user
Thanks Pavel

i'm not very clear on how the message-id header is set. I've looked at a number of web resources and sometimes it seems that it's set in the client but also I see that the first mail server can set the message-id header.

I'm generating the email using the built-in SMTP commands of 4Dv13 (relational database program/language). This doesn't contain any reference to a message-id header.

I could easily create a message-id if Kerio does not add one? What are the criteria for creating a message ID?

Thanks again

James
  •  
clan

Messages: 236
Karma: 22
Send a private message to this user
The mail client does not need to create a message ID, if it is not present in the mail Kerio should create one.
  •  
macjimbo

Messages: 103
Karma: 6
Send a private message to this user
Thanks Clan. However this leads now to the question of why Spam Assassin is flagging the mail as spam due to lack of message ID, if Kerio is supposed to create the message ID?
  •  
Pavel Dobry (Kerio)

Messages: 5245
Karma: 251
Send a private message to this user
clan wrote on Mon, 25 June 2012 18:09
The mail client does not need to create a message ID, if it is not present in the mail Kerio should create one.


True. But missing header is a significant indication that the message is not correct and could be a spam.
Pavel Dobry (Kerio)

Messages: 5245
Karma: 251
Send a private message to this user
macjimbo wrote on Mon, 25 June 2012 18:14
Thanks Clan. However this leads now to the question of why Spam Assassin is flagging the mail as spam due to lack of message ID, if Kerio is supposed to create the message ID?


The server does add this missing header. But Spam filter check is performed on the message as it come to the server, not on "fixed" version of the message.
Adding the header before the spam check does not make a sense and make the test useless.

This forum is not a technical support for 4Dv13. You can learn more about Message-ID header format in RFC 5822 (http://www.ietf.org/rfc/rfc5322.txt).
Previous Topic: Spam filter
Next Topic: Kerio 7.5 b2 Appointment issue
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Thu Oct 19 10:49:56 CEST 2017

Total time taken to generate the page: 0.00568 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.