Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Spam Weights
  •  
tedxas

Messages: 25
Karma: 0
Send a private message to this user
Gang --

What spam weights are y'all assigning?

We currently have "0.7" assigned to each of:

ORDB
SORBS DNSBL
SORBS RHSBL
SpamCop
SpamHaus SBL-XBL

We are checking CallerID and SPF for all incoming mail, but we are only "logging to security log" for each because I don't quite know how to score these yet.

Also, we are auto-deleting anything with a spam score >= 5.1 and seem to have pretty good results.

I would like to see your recommendations for fine-tuning these features.

Thanks,

Ted
  •  
Kerio_jthomas

Messages: 511
Karma: 1
Send a private message to this user
Hi Ted,

Here at Kerio US, we:

* Reject anything in a DNS blacklist
* Reject anything that fails an SPF check
* Reject anything that fails a CallerID check
* Mark as spam anything with a score of 2.8 or higher

We recieve a very large volume of spam every day, so these are very agressive settings. That said, I haven't had any false positives yet.

Cheers,
Joshua Thomas

Joshua Thomas
Technical Support Manager
2350 Mission College Blvd, Suite 400
Santa Clara, CA 95054
Phone: (408) 496-4500
Fax: (408) 496-6902
http://www.kerio.com/support.html

  •  
tedxas

Messages: 25
Karma: 0
Send a private message to this user
Is CallerID "widely implemented" across the planet? In other words, how safe is it to nuke messages that fail Caller ID?

Likewise, are SPF checks pretty accurate in your experience?

  •  
Kerio_jthomas

Messages: 511
Karma: 1
Send a private message to this user
CallerID and SPF are backwards compatible; if there is no CallerID or SPF record for the domain of the sender, NO ACTION IS TAKEN.

In order to get use out of CallerID/SPF, you have to check for it, and the DNS administrator for a domain has to add the correct records. If the DNS administrator doesn't add these records, people can forge email from his domain, but no email is ever rejected because of lack of these records.

That's how SPF/CallerID works.

Joshua Thomas
Technical Support Manager
2350 Mission College Blvd, Suite 400
Santa Clara, CA 95054
Phone: (408) 496-4500
Fax: (408) 496-6902
http://www.kerio.com/support.html

Previous Topic: Messages missing body on Webmail
Next Topic: mails got deleted automatically?? bug?
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Wed Nov 22 10:31:59 CET 2017

Total time taken to generate the page: 0.00369 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.