Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » New Kerio Anti-Spam Filter (Need reviews :3)
  •  
Maerad

Messages: 147
Karma: 29
Send a private message to this user
Hiya!

Just found out about the new thing and before I buy it, I would really appreciate some responses of you guys, how well it works. So any first adopters willing to share their experience? Very Happy

Things I really like is the delete of the msg, if phishing or malware, regardless of any whitelists etc. in Kerio.

What I don't like is, that the user can't select a mail as junk/no junk anymore, so the option with "report spam and/or no-spam" to bitdefender is IMHO a bit senseless. Also that you can't use it additional to the spam assassin filter, so it can be a bit more customized, depending on what kind of spam you receive.

Also - how good is the service of bitdefender itself? How fast are pishing mails etc. being blocked? From what I read only the hashes of attachments are send, so the filter can't run any heuristic on demand for them. Analyzing the phone numbers/url's etc. might help, but I'm quite a bit skeptical right now.
  •  
Pavel Dobry (Kerio)

Messages: 5141
Karma: 241
Send a private message to this user
Maerad wrote on Tue, 19 April 2016 12:38

What I don't like is, that the user can't select a mail as junk/no junk anymore, so the option with "report spam and/or no-spam" to bitdefender is IMHO a bit senseless. Also that you can't use it additional to the spam assassin filter, so it can be a bit more customized, depending on what kind of spam you receive.

That option is not "report spam" to Bitdefender. Please read the text carefully. It says "Allow signatures and metadata to be used....". It means that when these options are disabled, Bitdefender cloud does not store any data. It just checks them and forgets. To detects new spam waves the cloud service must be able to keep statistics of the data so it can detect spam messages sent in bulk. So it is highly recommended to have both these options enabled. That's one of ways how the filter learns new stuff. User contribution (Spam buttons) is not present here, everything is automatic.

Knowledge Base: http://kb.kerio.com/.
Technical support: http://www.kerio.com/support
------------------
Stay Connected Anytime, Anywhere. Discover Kerio Cloud!
  •  
Maerad

Messages: 147
Karma: 29
Send a private message to this user
Pavel Dobry (Kerio) wrote on Tue, 19 April 2016 12:51

That option is not "report spam" to Bitdefender. Please read the text carefully. It says "Allow signatures and metadata to be used....". It means that when these options are disabled, Bitdefender cloud does not store any data. It just checks them and forgets. To detects new spam waves the cloud service must be able to keep statistics of the data so it can detect spam messages sent in bulk. So it is highly recommended to have both these options enabled. That's one of ways how the filter learns new stuff. User contribution (Spam buttons) is not present here, everything is automatic.


Hey Pavel Smile

Honestly, I guess you misread / interpreted what I wrote. I said the server option to report spam/no-spam is a bit senseless. I never even mentioned how or what gets shared with bitdefender or that it can be enabled or disabled.

The option itself is bad (imho), because it uses only the kerio automatic filter to report back to bitdefender, if the mail was detected as spam or not with the additional scores. There is no way to manually select or deselect a mail as spam and report it to bitdefender, in case it IS (or not is) spam and the system/score didn't detect it, because it's new or the rules are a bit more lenient.

Also in my other sentence I said, that no attachments are uploaded, just the hash and so no on-demand scanning could be made. So I really don't get why you think I got that wrong Smile

We have some (mostly german) mails, that identifier as spam, but are so well made or no "bad" urls/links, it's not detected by a spam filter. That may be for a real company advertising the products and send the mail to us.
  •  
irow

Messages: 56
Karma: 4
Send a private message to this user
Maerad:

I purchased a license for the Bitdefender service the day it was available and have been using it since then. I have seen an increase in spam using the BitDefender Anti-Spam service. I believe this is attributed to the fact that Kerio assigns a negative score (-1, -2, or -3 depending on your setting) to any message that BitDefendant does not identify as spam. I have attempted to modify mail server.cfg to set the NegativeSpamScore variable to 0, but Kerio still shows KERIO_ANTI_SPAM: -1.000.

This is a problem for at least two reasons: (1) it appears that manually setting the NgativeSpamScore variable does not work and (2) Kerio's assumption that a non-hit on BitDefender means that a message is less likely to be spam is wrong. All that a non-hit on BitDefender tells us is that BitDefender doesn't know anything about the message. It is not a whitelist and should not be confused for one.

From what I have seen, the Bitdefender hit rate on spam is pretty good. That is, it identifies messages that other spam filter components also believe are spam; however, it misses spam that are identified by other components. I would say (and it's probably too early to tell for sure) that Bitdefender is a good tool to provide additional information for a composite spam rating, but it is not much more. It is not more effective at identifying spam than the spam assassin filters and it is about as effective as some of the good RBLs (Spamhaus Zen and SpamCop).

But just as we don't assign a negative score to a message that does not get an RBL hit, we should not assign a negative score to Bitdefender results. It's not good enough for that.
  •  
BobSpadger

Messages: 6
Karma: 0
Send a private message to this user
I've just had this go live over the weekend.

So far - it doesnt seem to be picking up as much spam as our old filters.

I'm hoping between BitDefender and Sophos they strip out the virus / Malware and Phising emails, they are my main concern.

Time will tell!
  •  
Pavel Dobry (Kerio)

Messages: 5141
Karma: 241
Send a private message to this user
irow wrote on Wed, 20 April 2016 15:31

I purchased a license for the Bitdefender service the day it was available and have been using it since then. I have seen an increase in spam using the BitDefender Anti-Spam service. I believe this is attributed to the fact that Kerio assigns a negative score (-1, -2, or -3 depending on your setting) to any message that BitDefendant does not identify as spam. I have attempted to modify mail server.cfg to set the NegativeSpamScore variable to 0, but Kerio still shows KERIO_ANTI_SPAM: -1.000.


With Kerio Connect 9.1.0 (http://forums.kerio.com/t/31289//) there is no negative score from Kerio Anti-Spam filter by default. You can change it if you want in the mailserver.cfg file.

Knowledge Base: http://kb.kerio.com/.
Technical support: http://www.kerio.com/support
------------------
Stay Connected Anytime, Anywhere. Discover Kerio Cloud!
Previous Topic: NEW RELEASE: Kerio Connect 9.1
Next Topic: KC Client - Calendar: BUG with All Day event
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Fri Dec 02 20:46:25 CET 2016

Total time taken to generate the page: 0.10305 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.