Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Kerio Connect Best Settings and Practices (Could Kerio provide best settings and practices based on automated surveys?)
  •  
Will Mayall

Messages: 171
Karma: 5
Send a private message to this user
I recently migrated a Kerio Connect server and reviewed settings. Many settings now seem obscure or perhaps even obsolete. For example, online tests complained about the delay caused by the Spam Repellent setting. The best settings--especially for security and spam--seem like a moving target.

Wouldn't it be great if there was a simple way know what the best settings are and be alerted if they change?

Some ideas to accomplish this:
  1. Survey. An automated system that sent Kerio reports of server settings could be used by Kerio to determine the most common settings. This data could be used by Kerio as a reality check for their designs and features and also to make recommendations.
  2. Test. An online or built-in test by Kerio on a Kerio Connect server to check that the server has optimal settings and make recommendations.
  3. Report. Automated reports where an active server regularly tests itself and reports to the administrator if best settings/practices have changed.
  4. Suggest. During setup, the server could make recommendations based on the current best settings/practices.
  •  
UnifiedTechs-Brian

Messages: 167
Karma: 15
Send a private message to this user
I would like to see Kerio provide some more basic support and how-to on the SPAM blocking systems but exact settings will never work for many reasons.

Lets say Kerio puts out a hard number that spam repellant should wait 12 seconds, then spammers will just see this and set their bots to wait 13 seconds and we all get spam or lets say Kerio puts out a list of keywords to block in spam, now the spammers have a list of keywords not to use to get through filters.

Spam prevention is a moving target because spammers are doing their research and finding ways through filters just as fast as we block them. What works today could not work tomorrow, so you have 3 options:

1. Learn about spam and spend a certain amount of time adjusting filters to block it yourself. (There is plenty of help on this forum and others)

2 Hire a third party filtering service

3. Hire a hosted Kerio service that actively manages your server to block spam and doesn't just spin up a VM for you to manage.


NOTE: I would love to see Kerio make their own blacklist service using collected data, or at least build reporting to 3rd party services into Kerio so our vast numbers of servers can help..

- Brian
Kerio Preferred Partner, Reseller & Hosting Provider
Unified Technology Solutions
  •  
Will Mayall

Messages: 171
Karma: 5
Send a private message to this user
Brian, your points are good.

To clarify my original point:
  1. The surveys would be automated and taken regularly against servers that opt-in. I'm not suggesting people fill out surveys.
  2. The results would be private and only available via the running Kerio Connect server's administration interface. For example, there might be a Question mark next to "Block IP addresses suspicious of password guessing attacks". Clicking the ? would show that 90% of surveyed servers set the checkmark. (The example is a random choice and may or may not be a good example.)

Such an automated survey would aggregate the knowledge of server administrators. It seems it would be useful for both Kerio and administrators.

Wouldn't you find such information useful?
  •  
j.a.duke

Messages: 345
Karma: 10
Send a private message to this user
Will Mayall wrote on Mon, 08 February 2016 11:53
Such an automated survey would aggregate the knowledge of server administrators. It seems it would be useful for both Kerio and administrators.

Wouldn't you find such information useful?


Will,

I know of you by reputation and if someone with your depth and breadth of experience is looking for additional information, the rest of us who haven't been so fortunate to have the experience you do could definitely benefit from the extra help that your idea would provide.

That's my long-winded way of saying, yes, I agree that there could be more information available.

I've been running mail servers for maybe 15 years and I still feel like I'm just beginning to learn about them, especially on the spam filtering side of things.

I've been fascinated reading the SpamAssassin thread to which MarkK has been contributing heavily and wish that we could have a bit more internal coaching in Connect about that topic in particular.

Thanks for thinking up and proposing the idea.

Cheers,
Jon
Previous Topic: v9.0.0 and NOD32
Next Topic: Email forwarding to Zendesk
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Fri Mar 31 02:26:50 CEST 2017

Total time taken to generate the page: 0.00427 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.