Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Custom SPAM rule for BODY not working (A custom SPAM rule for message BODY does not work.)
  •  
0ByteSolutions

Messages: 7
Karma: 0
Send a private message to this user
I am trying to create a custom SPAM rule (to look for the word "error") that checks the message body...

I have created the same rule, checking the "subject" header, and it works fine.

Any time I try to use any word or combination of words under the "Mail body" the rule is never triggered.

Is this function "broken"??

((BTW, Kerio Connect v8.1.2 (1523)))

[Updated on: Thu, 15 August 2013 06:02]

  •  
freakinvibe

Messages: 1508
Karma: 58
Send a private message to this user
This works for me. For testing have you checked that the rule is on top, so it gets checked first. Also, look in the header of the incoming mail to see if the rule has triggered.

Are you increasing the spam score or are you rejecting the mail?

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
0ByteSolutions

Messages: 7
Karma: 0
Send a private message to this user
Quote:
This works for me. For testing have you checked that the rule is on top, so it gets checked first. Also, look in the header of the incoming mail to see if the rule has triggered.


It is the ONLY rule I have in my Custom Rules.

I am decreasing the spam score (-0.1).
  •  
freakinvibe

Messages: 1508
Karma: 58
Send a private message to this user
How do you check if it works? You should see this in the message's header:

CUSTOM_BODY_0: -0.1

Do you see this?

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
mlee (Kerio)

Messages: 246
Karma: 16
Send a private message to this user
Custom rule
[img]./fa/3095/0/[/img]

X-Spam-Status: No, hits=0.0 required=5.0
tests=AWL: -0.700,HTML_MESSAGE: 0.001,CUSTOM_BODY_RULE_NUMBER_1: -0.1,
TOTAL_SCORE: -0.799,autolearn=ham

  • Attachment: spam.png
    (Size: 19.71KB, Downloaded 204 times)

PTSD. BP. OCD. ASPD. BPD. Certified.
  •  
freakinvibe

Messages: 1508
Karma: 58
Send a private message to this user
So it seems to work as you have

CUSTOM_BODY_RULE_NUMBER_1: -0.1

What is the problem then?

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
0ByteSolutions

Messages: 7
Karma: 0
Send a private message to this user
Quote:
So it seems to work as you have

CUSTOM_BODY_RULE_NUMBER_1: -0.1

What is the problem then?


*I* don't get that... I watch the "Debug" log.

When I set the rule to "Mail Header", select "Subject" & "contains substring" & in the "Content" box type in "error" - when I email myself a test message (from my gmail account) I get the following line in the log:
{spam} Spam Filter: Custom spam rules check finished, adding score -0.10


If I set the rule to "Mail body" & in the "Contains:" I type "error" when an email comes in with the word error in the body (like, when I send a test from my gmail account) I get:
{spam} Spam Filter: Custom spam rules check finished, adding score 0.00

  •  
freakinvibe

Messages: 1508
Karma: 58
Send a private message to this user
The body search is done within spamassissin, the header search is done within the Kerio anti-spam module.

So while the header check appears in the logs as "Custom Spam Rule", the body check does not.

It nevertheless triggers and works. You can easily prove that by creating a body search rule with a fancy string like bliblablu. Set the rule to reject the message. Then send a mail to yourself (from an external account) that contains bliblablu. The mail will be rejected.

Remove the rule and send the same mail again. It should get through.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
0ByteSolutions

Messages: 7
Karma: 0
Send a private message to this user
Quote:
So while the header check appears in the logs as "Custom Spam Rule", the body check does not.

It nevertheless triggers and works. You can easily prove that by creating a body search rule with a fancy string like bliblablu. Set the rule to reject the message. Then send a mail to yourself (from an external account) that contains bliblablu. The mail will be rejected.

Remove the rule and send the same mail again. It should get through.


NOPE. I used the word "FlabberFlub", as you suggested, setting the rule to REJECT the message yet it still showed up in my inbox.
  •  
freakinvibe

Messages: 1508
Karma: 58
Send a private message to this user
Have you switched "Spam Filter" on in the Debug log? I have done this and get in the Debug log:

Quote:
[19/Aug/2013 09:18:28][1684] {spam} Message from <MyExternalEmail@hotmail.com> to <MyKerioAddress<_at_>mymailserver.com> matched body DENY rule: "FlabberFlub" test matched.


The mail never arrives in my Inbox. So I guess you have to open up a support case with Kerio.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
0ByteSolutions

Messages: 7
Karma: 0
Send a private message to this user
Quote:
Have you switched "Spam Filter" on in the Debug log? I have done this and get in the Debug log:

Regardless of the debug log settings, the message still arrived in my inbox (and should not have). I will, however, check the settings anyway.

(BTW - where would I change that setting? Does such a setting exist?)

UPDATE:

I "upgraded" to the latest 8.1.3 (1711) and now the custom body rule (while set to reject is working). I'll check the "decrease score" setting now, again, as well.

[Updated on: Mon, 19 August 2013 14:00]

  •  
freakinvibe

Messages: 1508
Karma: 58
Send a private message to this user
Changeing the view settings in debug log does not change the behaviour, it just shows more or less messages in the debug log.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
Previous Topic: Outlook 2013 Multiple MAPI Accounts
Next Topic: Outlook sent do not work
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sat Aug 19 14:54:24 CEST 2017

Total time taken to generate the page: 0.00454 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.