Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » SPAM the ever growing probem/Like to have features/ideas
  •  
MMC65

Messages: 17
Karma: 0
Send a private message to this user
1) is it possible to have wildcards in SPAM subjects? e.g. * or ? like subject "hey * stock is up for *"
hey joe.banks stock is up for metal
key fred.fields stock is up for paper

2) is it possible for emails containing images to have a log image database that would contain someking of CRC or digitial image of that regardless of image name would be able to identify could the add that image signiture to a image SPAM database. That could then be use to recongnise when the same vigra/meds/software/porn ads. with the same image signiniture regardless of name to be treated as a SPAM mail.
Seems the image names/from user and subject keep changing.

3) SPAM of emails containing no body text a-z A-Z characters
excluding attachments and hyperlinks.
e.g. when image and hypelink is removed the body is empty.

4) SPAM based on body text strings
  •  
mkerr

Messages: 36

Karma: 0
Send a private message to this user
SpamAssassin needs constant updates, which we only get every few months with maintenance releases of KMS. With spammers changing their tactics rapidly to fool Bayes filters, an auto-update mechanism is needed for the Bayes filters. Some other mail servers, such as Visnetic already have this.

The most effective SPAM counter measure I've seen however, is a challenge/response system. Each originator is sent back an email asking them to input a code (which can't be automatically decoded by a bot). This only has to be done once for each sender, and they are then added to a whitelist for your account. Messages that haven't been authorised are put in a holding queue for 14 days, and then deleted (unless you release it manually). Given that most SPAM comes from spoofed addresses, this is very effective.

My usenet provider (Newsguy) uses such a scheme and I have NEVER got one SPAM through them.

Both measures were proposed to Kerio some time back, and they accepted the suggestion at the time. How far along it is in development I don't know, since Kerio don't reveal whats in the pipeline these days.
  •  
freakinvibe

Messages: 1552
Karma: 62
Send a private message to this user
Spamassissin, which is integrated in KMS, can do all that, but as mkerr says, the rules have to be updated regularly. If you don't want to wait for the next KMS release you can download the updated .cf files and replace them in the spamassassin directory.

You can also write your own .cf files to have your own subject and body text matching rules, but you really have to know what you are doing. It is not just the click of a button.

So, yes, it would be great it Kerio added an easy Spamassissin Update mechanism.

For my 20 users, I have configured a 5 layer Spam protection which works really good for me:

- Spam repellent (19 seconds)
- Blacklists (Spamhaus, Spamcop, Sorbs, Dsbl, Spews)
- Lookup of Sender Domain
- Spamassassin (incl. Bayes)
- Personal White List (mostly for newsletters)

That gives me 1 or 2 Spams every second day, which I can live with.

Regards, Pascal

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
Joel

Messages: 6
Karma: 0
Send a private message to this user
I am new to KMS and looking for ways to keep out profanity/vulgar/sexual words and noticed your post about the .cf files. I have opened them in Wordpad but do not want to edit them without understanding them. Can you tell me if there is documentation on this? ( I have tried to find the file that they mention at the top of the .cf file but that path is not on the server)

Thanks in advance

JR
  •  
MMC65

Messages: 17
Karma: 0
Send a private message to this user
Hi Joel,
I have check with kerio about KMS updates and it is not recommended to change the .cf files. As they will get replaced when KMS updates get released.

Unless you save for exmaple the local.cf and replace it after checking the changes.
Similar to what I currently do with the reports\en\ .rep
files .. edited email/spam/vir/attachment reports to notify used of policy and contacts for obtaining strips attachments.

Each time and upgrade occurs the files are replaced as only the CFG files are retained
  •  
Joel

Messages: 6
Karma: 0
Send a private message to this user
Thank you for the information. You brought up something else I was wondering about, and that is how do you restore these stripped attachments? Do you have to forward that to the admin account in original form?

JR
  •  
MMC65

Messages: 17
Karma: 0
Send a private message to this user
yes we send the spam to spam-officer(alias) and stripped email to mail.officer

and run it thru a ton of mail rules to place into the specific user folders
spam rules
color coding rules for different types of attahcments
dangerious attachment rules

from local user rules

to local user rules

catch to place into folder for users requirign a new rules to be added

and a bounce back/forward for emails sent to mail.officier advising incorrect reply to unattended server or incorrect receiptant and to contact support instead for stripped attachments

We found outlook express on the 2003 server handles the load queit well.

We got a dephi programmer to write a tool to purge ottlook folders to deleted items older that a certain date.

Export the rules from the registry monthly ... .reg is a text file and in notepad you can do a search and replace the indentifer key if need to ever load rules into a new PC.
folders and emails can normally be import accross the network.
There is info on the net about this
Previous Topic: KMS works with FC6?
Next Topic: Two problems -> Outlook 2007 + Internet Explorer 7
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sat Nov 18 16:54:55 CET 2017

Total time taken to generate the page: 0.00498 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.