Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Visual Spam
  •  
becatlibra

Messages: 33
Karma: 0
Send a private message to this user
Since SORBS is a POS so to speak I have added bl.csma.biz and list.dsbl.org and sbl-xbl.spamhaus.org -- also bl.spamcop.net

My question is - is there anything (a list I am missing) that would help with the increase of visual spam? You know the type - the message is a bunch of text nonsense and there is a picture ad in the mail as well?

Just thought I would check.

Thanks

  •  
freakinvibe

Messages: 1554
Karma: 62
Send a private message to this user
Hi

I don't think that an RBL will help specifically with image & garbled text spam. It is rather up to the spamassissin rules to catch that sort of spam.

You can still use SORBS, but only add spam score with it, don't use it for direct blocking.

See also this very interesting discussion about the topic:
http://www.debian-administration.org/articles/448

Regards, Pascal

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
becatlibra

Messages: 33
Karma: 0
Send a private message to this user
While that is interesting (the article on visual spam) I am not sure how it really pertains to Kerio as a whole. '

I don't really fancy trying to add something to kerio myself. Someone in that article mentions

"I always wonder why people like to hog their computers with ocr spam scanning, with 70_sare_stocks rules from Rulesemporium I get nearly most of them."

Now this is not a Blacklist but a ruleset for spamassassin I believe. Nothing I can implement, I don't think.

Oh well - for now I guess I will just reenable SORBS and have it add to the spam score and cross my fingers. As far as I know, SORBS still lists Hotmail and Yahoo (which many of our customers use.)
  •  
tpalmer

Messages: 61
Karma: 0
Send a private message to this user
Adding rules and adjusting SA scoring is pretty easy, and in the long run, the only way to stay on top of spam.

To add rules, all you need do is get the new ruleset(s) - and SARE is a good place to look - copy them into the SA rules directory and then restart the mailserver process. The rule directory location varies by OS, I'm sure, but its a subdirectory of where the mailserver executables are (not the mailstore tree). On OSX, its /usr/local/kerio/mailserver/plugins/spamassassin/rules. If you can't find them, search for *.cf.

To change scoring, you can put entries in local.cf, in the rules directory. Google Spamassassin for details, as the procedure is the same for all uses of Spamassassin.

After making changes, watch your spam levels and results closely.

Its an unfortunate fact of life these days that spam control is an active process - either pay someone like Barracuda/GFI/Postini to handle it for you, or do it yourself through blacklists *and* actively working your SA rules and scoring.
  •  
becatlibra

Messages: 33
Karma: 0
Send a private message to this user
When Kerio is updated to a new version is all of this lost (the rule changes, etc?)

I am surprised there isn't an interface built into the Admin Console for Uploading rulesets to spam assassin, etc.

Oh well
  •  
freakinvibe

Messages: 1554
Karma: 62
Send a private message to this user
Yes, but I would do a backup before the upgrade anyway. Then, you can copy all the .cf files that are not older from the backup. Same applies for WebMail html files that you modified.

It would be great if KMS could update certain spamassassin rules automatically, like the McAfee Virus signature updates, but that would be an enhancement request to Kerio.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
becatlibra

Messages: 33
Karma: 0
Send a private message to this user
couldn't a cron job do this? using the wget command and a bash script of some kind?
  •  
becatlibra

Messages: 33
Karma: 0
Send a private message to this user
Has anyone successfully implemented "Rules Du Jour" on a Kerio Box?

http://www.exit0.us/index.php?pagename=RulesDuJour

  •  
dbarak

Messages: 25
Karma: 0
Send a private message to this user
yes, a lot of the rules seem to need rulesdujour. if anyone has info on success with it, it would really help.
Previous Topic: #deleted?
Next Topic: mailing list and public folders
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Thu Nov 23 19:52:14 CET 2017

Total time taken to generate the page: 0.00433 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.