Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » spam rules precedence and priority (spam rules precedence and priority)
  •  
bandicootltd

Messages: 33
Karma: 3
Send a private message to this user
Hi. Does anyone have a list of the ordering which the spam blocking etc works?

I have in use SpamAssassin, Internet Blacklists which add a score and don't block outright, custom rules which can add or decrease or also block or allow through, plus SPF which block.

Is there a workflow produced which takes you through the stages of the Kerio filtering so we can understand how it works.

eg someone is sending an email from an address we add as a safe sender, but they are sending from a blacklisted server which doesnt match the SPF record, what happens?

Also, can end users add to safe senders which overrules all that the admin can add?
  •  
freakinvibe

Messages: 1487
Karma: 57
Send a private message to this user

Dexion AG - The Blackberry Specialists in Switzerland
http://www.dexionag.ch
  •  
bandicootltd

Messages: 33
Karma: 3
Send a private message to this user
Yep. Seen this. Doesnt cover the order and priority. Does a whitelist sender overrule a custom rule reject, or SPF or blacklist IP?
  •  
freakinvibe

Messages: 1487
Karma: 57
Send a private message to this user
Rule of thumb: Anything that rejects outright at SMTP level cannot be overruled by user whitelists.

E.g. if you reject mails via IP Blacklists, the user cannot overrule this as user rules are not applied at this early level.

A more detailed workflow can be found here:

http://aplawrence.com/Kerio/kerio_mailserver_spam_filtering. html


Quote:
Processing Flow

The first check is Spam Repellent (if turned on). If the sender is rejected here due to their haste, no other processing is done.

Next, during the receipt of mail headers, the Internet blacklists, custom blacklists, custom whitelists, and SPF records are checked. If rejected here, again that's the end of it.

If not, the mail body is taken in and CallerID, SURBL, Custom spam rules, and SpamAssassin checks are applied.
Effect of Whitelists

There are three places where Spam rejection can be overridden. The first is the "Custom Whitelist of IP Adresses" in the Content Filter->Spam Filter->Blacklists tab. This only affects things found in the Internet Blacklists section of that page.

The second is in Content Filter->Spam Filter->Custom Rules. These can be used to decrease or eliminate spam scores as well as increase. Note that if you see a header that contains CUSTOM_RULE_, it happened because of these rules.

X-Spam-Status: No, hits=0.4 required=3.0
tests=AWL: 0.090,BAYES_00: -1.665,HTML_MESSAGE: 0.001,
MIME_HTML_ONLY: 0.001,CUSTOM_RULE_TO: 2.00,TOTAL_SCORE: 0.427,autolearn=ham


Finally, users can create whitelists. These are stored as part of the "filter.siv" file that moves messages to Junk Mail. When a message is whitelisted because of this, the X-Spam-Status line will show the rules that were applied, but the X-Spam-Flag will be unset and X-Spam-Level will be removed.

[Updated on: Wed, 17 February 2016 19:10]


Dexion AG - The Blackberry Specialists in Switzerland
http://www.dexionag.ch
Previous Topic: A bug in Kerio Connect OL 2016 Contacts sync?
Next Topic: Email List Questions
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Thu Mar 23 17:22:48 CET 2017

Total time taken to generate the page: 0.00965 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.