Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Spam Filter Rules Not Working (Spam Filter Rules Not Working)
  •  
shakamoto

Messages: 8
Karma: 0
Send a private message to this user
Hi,
We are running Kerio Connect Server and have recently been receiving a large amount of spam through to various users.

were as the log indicates certain spam messages are being detected and blocked automatically, some are still making their way through, even after adjusting the aggression of the spam filter.

As this is the case, i have tried creating custom rules to help, as luckily the spam is very similar and the majority uses the same/similar subject line, however the rules do not seem to be working...

I have attached a screenshot of the rule, and have tested by sending a message from my gmail account containing the subject shown and it still comes through.

there are no other conflicting rules setup and this one has been given priority over others.

I've read a few things online and found the only possible solution to re-install the spamassasin component of kerio, though this seems a bit rash, and i also don't belive this is the answer, as we have another seperate server on another network/domain which is doing the axact same thing.

so i don't know if it's me being an idiot and not setting up the rule correctly, or a problem with the software.

Has anyone else had this problem who could offer a fix?

Cheers in advance
shakamoto

  • Attachment: example.png
    (Size: 30.05KB, Downloaded 180 times)
  •  
freakinvibe

Messages: 1511
Karma: 58
Send a private message to this user
This works for me.

How does your test mail look? Can you post the headers here?

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
shakamoto

Messages: 8
Karma: 0
Send a private message to this user
I've literally sent a email with the subject "New Fax Message" and "test" in the body from my gmail account.
  •  
freakinvibe

Messages: 1511
Karma: 58
Send a private message to this user
Still it would be good to look at the header, to see which rules have been kicking in. Example header:

Quote:
Return-Path: <proust.jean<_at_>aol.fr>
X-Spam-Status: Yes, hits=8.6 required=5.0
tests=DNSBL_DNSBL.SORBS.NET: 2.00,BAYES_99: 4.07,HTML_MESSAGE: 0.001,
MISSING_HEADERS: 1.021,SUBJ_ALL_CAPS: 1.6,TOTAL_SCORE: 8.692,autolearn=no
X-Spam-Flag: YES
X-Spam-Level: ********


Without that, it is difficult to help.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
shakamoto

Messages: 8
Karma: 0
Send a private message to this user
Hi,
Is there something particular you are looking for in the header? there is nothing relating to X-spam or spam scores in the source whatsover.

Cheers
shakamoto
  •  
freakinvibe

Messages: 1511
Karma: 58
Send a private message to this user
If there is no

X-Spam-Status and tests in the header, Kerio Connect has not done any Anti-Spam checks on the message AT ALL!

This can happen if the message is bigger than 128kB or if you have whitelisted the sender or the source IP address.

Have you whitelisted your GMail address?

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
shakamoto

Messages: 8
Karma: 0
Send a private message to this user
cheers for the info,
i only have one other rule setup which white lists anything from the domain googlemail.com, however, this rule is below the rule i have set, and also i have tried from a completely different domain which is not white listed or included in any rules and still nothing in the header.

whats very strange, is that i'd assume IF the rule which white lists the googlemail domain was somehow actioning and stopping this, it wouldn't say last used 20 hours ago (see attachment)

any thoughts?

cheers
Shakamoto

  •  
shakamoto

Messages: 8
Karma: 0
Send a private message to this user
Further info:

I've just disabled ALL rules except the one i created regarding the subject line of "New Fax Message"and the message is still delivered, the rule is not actioned and the headers show no spam?

sounds like it's broke or theres something about our setup here thats causing problems.

Cheers
Phill
  •  
freakinvibe

Messages: 1511
Karma: 58
Send a private message to this user
Please check any mails you get (or your users get) for the header. If none of them shows the Spam header, something is broken.

To analyze further you can switch on "Spam Filter" and "SpamAssassin Processing" in the Debug log and then analyze the log.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
shakamoto

Messages: 8
Karma: 0
Send a private message to this user
Previous Topic: Users not seen by others
Next Topic: Outlook Kerio Connector Calendar Viewing Participants Error
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Wed Aug 23 08:14:50 CEST 2017

Total time taken to generate the page: 0.00513 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.