Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Recommendations for Spam getting through Kerio Anti-Spam (Bitdefender -2.00 score is causing spam to get through)
  •  
ebthecas

Messages: 1
Karma: 0
Send a private message to this user
You can see from the mail headers that this message was flagged by Spamhaus blacklist and score was increased from other issues in the email, but Kerio_Anti_Spam gave it -2.00 which allowed it to pass into the inbox without being flagged as spam.

With no way to train Kerio Anti Spam, how do we help the system appropriately flag these messages in the future? Does moving the message to junk have any impact or should we just delete?

Since activating Anti Spam, I haven't noticed any improvement over our old custom filters + blacklists + bayesian training. It does seem that more of these types of messages are making it through.

Thanks for your assistance.

-------------- mail header -----------------

Return-Path: <AllisonDaniels<_at_>implants.dentalupdatenewspecials.rocks >
X-Kerio-Anti-Spam: Build: [Engines: 2.15.7.1024, Stamp: 3], Multi: [Enabled, t: (0.000008,0.002704)], BW: [Enabled, t: (0.000013)], RTDA: [Enabled, t: (0.382196), Hit: No, Details: v2.3.6; Id: 2m1gh1t.1alkln8n1.26r8m], total: 0(700)
X-Spam-Status: No, hits=2.8 required=3.6
tests=DNSBL_ZEN.SPAMHAUS.ORG: 1.50, KERIO_ANTI_SPAM: -2.000, HTML_IMAGE_ONLY_20: 1.395,
HTML_MESSAGE: 0.001, MIME_HTML_ONLY: 1.399, T_REMOTE_IMAGE: 0.01,
CUSTOM_BODY_RULE_NUMBER_14: 0.5, TOTAL_SCORE: 2.805,autolearn=disabled
X-Spam-Level: **
Received: from implants.dentalupdatenewspecials.rocks ([82.180.240.155])
by mail.xxxxxxxx.com with ESMTP
for yyyyyyy<_at_>xxxxxxxx.com;
Wed, 22 Jun 2016 15:43:20 -0500
Date: Wed, 22 Jun 2016 13:42:20 -0700
Subject: Having to take pictures with missing teeth is very-embarrassing; we understand and we want to help.
Message-ID: <pm11845307xou12911507379129115070-dlowland<_at_>ebeacon.com.2 >
To: <yyyyyyy<_at_>xxxxxxxx.com>
Content-Type: text/html
MIME-Version: 1.0
From: "Dental Implant Tips" <DentalImplantTips<_at_>dentalupdatenewspecials.rocks>
Content-Transfer-Encoding: 8bit

---------- mail content --------------

<html xmlns="[[link removed]]">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Implant-Specials</title>
</head>

<body>
<table width="100%" border="0" cellspacing="0" cellpadding="0">
  <tr>
    <td align="center" valign="top" bgcolor="#58D3F7" style="background-color:#58D3F7;">
    <table width="600" border="0" cellspacing="0" cellpadding="0">
      <tr>
        <td align="center" valign="top" bgcolor="#58D3F7" style="background-color:#58D3F7; font-size:16px; font-family:Georgia, Arial; color:#000000;"><p>
<img sr="[remove-link to post-tp://view1.dentalupdatenewspecials.rocks]">
</p><p>
Are You Thinking-About Dental Implants?
</p><p>
<img sr="[remove-link-tp://view2.dentalupdatenewspecials.rocks]" width="110" height="120" style="float:right;" align="right">
Would you like to find out more about the procedure or get more<br>
information-regarding the cost? Not a problem!
</p><p>
There are many-affordable options as well as<br>
specialized doctors all around the country.
</td>
	</tr>
      <tr>
        <td align="center" valign="top" bgcolor="#58D3F7" style="background-color:#58D3F7; font-size:16px; font-family:Georgia, Arial; color:#000000;"><p><br><b>
<a hr="[remove-linktp://dentalcare.dentalupdatenewspecials.rocks">Dental Implant-Specials
<br>Read-Sponsored Listings
</td>
	</tr>
<tr>        <td align="center" valign="top" bgcolor="#58D3F7" style="background-color:#58D3F7; font-size:16px; font-family:Georgia, Arial; color:#0431B4;"><p><br><br><br></p><br><br><p><br><br></p><p><br><br><br><br><br></p><br>
</td>
  </tr>
</table>
If you would.prefer to end-these dentalads-from eDirect_Marketing you can go <a hr[remove-link-tp://ugwe8.dentalupdatenewspecials.rocks">here</a>.
<br>
2885 Sanford-Avenue SouthWest No.37719<br>Grandville, M.O. #49418
</body>
</html>
Previous Topic: The certificate is not trusted
Next Topic: Deleting a specific email from all accounts
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Tue Dec 06 03:56:26 CET 2016

Total time taken to generate the page: 0.00826 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.