Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Spam not being filtered. (Email found on many blacklist but still got through.)
  •  
Dude

Messages: 3
Karma: 0
Send a private message to this user
I have emails that look like they should be rejected but still got through with out even getting labeled as spam. Here is the raw header information:
Return-Path: <>
X-Envelope-To:
Message-ID: <2498588174-302055424@
X-Spam-Status: No, hits=0.0 required=3.5
tests=DNSBL_BL.SPAMCOP.NET: 4.00,DNSBL_DNSBL.SORBS.NET: 4.00,DNSBL_DB.WPBL.INFO: 4.00,
DNSBL_CBL.ABUSEAT.ORG: 4.00,DNSBL_TRUNCATE.GBUDB.NET: 4.00,DNSBL_SPAM.DNSBL.SORBS.NET: 4.00,
BAYES_95: 3.514,FSL_HELO_BARE_IP_1: 2.347,MISSING_MID: 0.497,
RCVD_NUMERIC_HELO: 1.164,TVD_RCVD_IP: 0.001,TVD_RCVD_IP4: 0.001,
T_SURBL_MULTI1: 0.01,T_SURBL_MULTI2: 0.01,T_URIBL_SEM: 0.01,
T_URIBL_SEM_RED: 0.01,URIBL_JP_SURBL: 1.25,URIBL_SC_SURBL: 0.568,
URIBL_WS_SURBL: 1.608,CUSTOM_RULE_FROM: ALLOW,TOTAL_SCORE: 34.990,autolearn=no
X-Spam-Level:
Received: from 201.166.160.206 ([201.166.160.206])

Mon, 16 Feb 2015 16:26:01 -0800
Received: from unknown (HELO localhost) (criminal_abuse_specimen@sbcglobal.net<_at_>205.111.174.89)
by 201.166.160.206 with ESMTPA; Mon, 16 Feb 2015 18:26:54 -0600
X-Originating-IP: 205.111.174.89
From: criminal_abuse_specimen<_at_>sbcglobal.net
To:
Subject: Life is for enjoyment
Date: Mon, 16 Feb 2015 18:17:10 -0600

  •  
Vicky

Messages: 656

Karma: 81
Send a private message to this user
Hi Kelly,

From what I can see in the header it looks like this email was let through due to a custom allowing it:

"CUSTOM_RULE_FROM: ALLOW"

So you may want to check your custom rules as it looks like that it allowed the email through.

All the best,
Vicky
  •  
Dude

Messages: 3
Karma: 0
Send a private message to this user
Found it sbcglobal.net was allowed. Thank you!

[Updated on: Tue, 17 February 2015 14:55]

  •  
Vicky

Messages: 656

Karma: 81
Send a private message to this user
Hi Kelly,

No problem. Glad you found the rule causing the issue quickly.

All the best,
Vicky
Previous Topic: Several questions about 8.4.1 (3789)
Next Topic: Expand Groups Receipents / Members
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Wed Aug 23 17:40:33 CEST 2017

Total time taken to generate the page: 0.00443 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.