Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » SPAM bounce attack - filter not working
  •  
netmax

Messages: 43
Karma: 1
Send a private message to this user
Hi there,

I seem to have a personal blackout with the filter rules of my mailbox.

Since this morning some stupid spammer seems to have used my email address in the "from" field of his bullshit. The result is hundreds of bouncing messages from different mailservers (which all seems to ignore my SPF domain settings - but that's a different story).

However, as they probably all have "Mail Delivery System", "Mailer Daemon" as senders name I thought it should be easy to filer this directly away to the trash. I did these settings in the Kerio Web Client for my mailbox:

If *any* of these criteria are matched:

From | Contains | mail delivery
From | Contains | mailer daemon
From | Contains | postmaster@
Sender header | contains | mailer-daemon@

Move to | trash

X Skip other rules

The filter is active and on first position. But not even one of the messages if moved to trash, so the complete filter is not working. Does anyone have an idea why?

Thanks!
  •  
freakinvibe

Messages: 1508
Karma: 58
Send a private message to this user
You don't have to use the "From" but the "Sender Header" everywhere.

But this rule also has some negative impact as you will not get any notifications if you mistype a recipient address or for other reasons. You will never know if your mail has bounced.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
netmax

Messages: 43
Karma: 1
Send a private message to this user
Thank you, I've changed that and will observer.

I'm aware that actually also my "real" bounces are moved to the trash ... it's only temporary until this stupid wave is over. My IDevices are indicating mails every minute and this drive you really crazy.
  •  
MacLab

Messages: 216
Karma: 15
Send a private message to this user
You might want to implement spf with a hard fail on your domain. It could help to cut down on the problem as some servers will reject the initial message.

MacLab, Inc.
Kerio Certified Partner, Reseller, Hosting Provider, Kerio Connect Certified.
http://maclaboratory.com
Previous Topic: Catch Chinese character spams
Next Topic: Kerio Connect and OX Server.app 3
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Mon Aug 21 21:34:56 CEST 2017

Total time taken to generate the page: 0.00451 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.