Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Spam issues, no amount of changing filters works
  •  
jahsupport

Messages: 2
Karma: 0
Send a private message to this user
I have multiple users right now that are getting heavy amounts of spam (25-30/day in INBOX). They are OBVIOUS spam messages, and yet I can't seem to get the filters to pick them up. I've added blacklists, etc. and changed the "Mark and Block" ratings sliders as much as i can to yield a better result, yet nothing has helped. I have mark and block at 2 and 3, respectively, right now. Also, I have made sure that the DNS lookup is functioning for the blacklists I currently have enabled.

Greylisting is enabled and working as well. While that claims to be blocking some, it's not made a difference in these users receiving spam.

Any help would be greatly appreciated. It seems odd to me that the sliders aren't making a single bit of a difference.

I've also thought about installing MailScanner on the appliance image I'm currently running. Which may/may not be a good idea.

My next thing I'm most likely doing is purchasing a Barracuda, but even with that, I feel like these filters on Kerio itself should be making at least a dent, but they don't seem to.

Thanks.

[Updated on: Wed, 05 November 2014 22:28]

  •  
Pavel Dobry (Kerio)

Messages: 5245
Karma: 251
Send a private message to this user
This could help.
First step in troubleshooting spam issues is to look into email headers.

BTW: The lower the reject score is the harder is to train Bayes database because messages will be rejected and not used for learning adaptive Bayes filter.
  •  
Machete

Messages: 262
Karma: 5
Send a private message to this user
@jahsupport - how long has your server been running? Pavel mentions the Bayes DB - which after time seems to act funky/corrupted and needs reset. I reset mine about every 12 months. Read here: http://forums.kerio.com/mv/msg/27477/0/15/ Markk describes how to reset this.

@Pavel - I've read about that Bayes DB only holds so many 'tokens' - and there's supposedly a place to increase this, but I haven't found it with Kerio's implementation. Does this sound like anything that users who see these problems with Bayes should pursue increasing? (modifying how many tokens the db stores)
See here: http://spamassassin.apache.org/full/3.1.x/doc/sa-learn.html# expiration

Pavel Dobry (Kerio) wrote

BTW: The lower the reject score is the harder is to train Bayes database because messages will be rejected and not used for learning adaptive Bayes filter.


This also caught my attention as I'm set at 1.5 (mark) and 3.6 (block). If I reset my Bayes and increase my block to help better train the Bayes (as your post suggests) my users will be flooded with legit spam. Which sends me back to my previous question about quantity of tokens in the DB.
Previous Topic: GMail block SORBS DNSBL
Next Topic: Connect Forum Sub-Forums?
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Fri Aug 18 22:00:56 CEST 2017

Total time taken to generate the page: 0.00390 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.