GFI Software

Welcome to the GFI Software community forum! For support please open a ticket from https://support.gfi.com.

Home » GFI User Forums » Kerio Connect » Custom SPAM rule for BODY not working (A custom SPAM rule for message BODY does not work.)
Custom SPAM rule for BODY not working [message #105514] Thu, 15 August 2013 06:01 Go to next message
0ByteSolutions is currently offline  0ByteSolutions
Messages: 5
Registered: January 2013
Location: Naples, FL
I am trying to create a custom SPAM rule (to look for the word "error") that checks the message body...

I have created the same rule, checking the "subject" header, and it works fine.

Any time I try to use any word or combination of words under the "Mail body" the rule is never triggered.

Is this function "broken"??

((BTW, Kerio Connect v8.1.2 (1523)))

[Updated on: Thu, 15 August 2013 06:02]

Report message to a moderator

Re: Custom SPAM rule for BODY not working [message #105529 is a reply to message #105514] Thu, 15 August 2013 17:44 Go to previous messageGo to next message
freakinvibe is currently offline  freakinvibe
Messages: 589
Registered: April 2004
This works for me. For testing have you checked that the rule is on top, so it gets checked first. Also, look in the header of the incoming mail to see if the rule has triggered.

Are you increasing the spam score or are you rejecting the mail?


Dexion Services AG - IT Support Services in Basel, Switzerland
https://dexionag.ch
Re: Custom SPAM rule for BODY not working [message #105533 is a reply to message #105529] Thu, 15 August 2013 19:12 Go to previous messageGo to next message
0ByteSolutions is currently offline  0ByteSolutions
Messages: 5
Registered: January 2013
Location: Naples, FL
Quote:
This works for me. For testing have you checked that the rule is on top, so it gets checked first. Also, look in the header of the incoming mail to see if the rule has triggered.


It is the ONLY rule I have in my Custom Rules.

I am decreasing the spam score (-0.1).
Re: Custom SPAM rule for BODY not working [message #105545 is a reply to message #105533] Fri, 16 August 2013 07:44 Go to previous messageGo to next message
freakinvibe is currently offline  freakinvibe
Messages: 589
Registered: April 2004
How do you check if it works? You should see this in the message's header:

CUSTOM_BODY_0: -0.1

Do you see this?


Dexion Services AG - IT Support Services in Basel, Switzerland
https://dexionag.ch
Re: Custom SPAM rule for BODY not working [message #105552 is a reply to message #105514] Fri, 16 August 2013 09:14 Go to previous messageGo to next message
mlee (Kerio)
Messages: 211
Registered: October 2012
Location: Sydney
Custom rule
[img]./fa/3095/0/[/img]

X-Spam-Status: No, hits=0.0 required=5.0
tests=AWL: -0.700,HTML_MESSAGE: 0.001,CUSTOM_BODY_RULE_NUMBER_1: -0.1,
TOTAL_SCORE: -0.799,autolearn=ham
  • Attachment: spam.png
    (Size: 19.71KB, Downloaded 444 times)


PTSD. BP. OCD. ASPD. BPD. Certified.
Re: Custom SPAM rule for BODY not working [message #105554 is a reply to message #105552] Fri, 16 August 2013 09:50 Go to previous messageGo to next message
freakinvibe is currently offline  freakinvibe
Messages: 589
Registered: April 2004
So it seems to work as you have

CUSTOM_BODY_RULE_NUMBER_1: -0.1

What is the problem then?


Dexion Services AG - IT Support Services in Basel, Switzerland
https://dexionag.ch
Re: Custom SPAM rule for BODY not working [message #105570 is a reply to message #105514] Fri, 16 August 2013 14:42 Go to previous messageGo to next message
0ByteSolutions is currently offline  0ByteSolutions
Messages: 5
Registered: January 2013
Location: Naples, FL
Quote:
So it seems to work as you have

CUSTOM_BODY_RULE_NUMBER_1: -0.1

What is the problem then?


*I* don't get that... I watch the "Debug" log.

When I set the rule to "Mail Header", select "Subject" & "contains substring" & in the "Content" box type in "error" - when I email myself a test message (from my gmail account) I get the following line in the log:
{spam} Spam Filter: Custom spam rules check finished, adding score -0.10


If I set the rule to "Mail body" & in the "Contains:" I type "error" when an email comes in with the word error in the body (like, when I send a test from my gmail account) I get:
{spam} Spam Filter: Custom spam rules check finished, adding score 0.00

Re: Custom SPAM rule for BODY not working [message #105575 is a reply to message #105570] Fri, 16 August 2013 15:55 Go to previous messageGo to next message
freakinvibe is currently offline  freakinvibe
Messages: 589
Registered: April 2004
The body search is done within spamassissin, the header search is done within the Kerio anti-spam module.

So while the header check appears in the logs as "Custom Spam Rule", the body check does not.

It nevertheless triggers and works. You can easily prove that by creating a body search rule with a fancy string like bliblablu. Set the rule to reject the message. Then send a mail to yourself (from an external account) that contains bliblablu. The mail will be rejected.

Remove the rule and send the same mail again. It should get through.


Dexion Services AG - IT Support Services in Basel, Switzerland
https://dexionag.ch
Re: Custom SPAM rule for BODY not working [message #105588 is a reply to message #105514] Fri, 16 August 2013 22:57 Go to previous messageGo to next message
0ByteSolutions is currently offline  0ByteSolutions
Messages: 5
Registered: January 2013
Location: Naples, FL
Quote:
So while the header check appears in the logs as "Custom Spam Rule", the body check does not.

It nevertheless triggers and works. You can easily prove that by creating a body search rule with a fancy string like bliblablu. Set the rule to reject the message. Then send a mail to yourself (from an external account) that contains bliblablu. The mail will be rejected.

Remove the rule and send the same mail again. It should get through.


NOPE. I used the word "FlabberFlub", as you suggested, setting the rule to REJECT the message yet it still showed up in my inbox.
Re: Custom SPAM rule for BODY not working [message #105614 is a reply to message #105588] Mon, 19 August 2013 09:24 Go to previous messageGo to next message
freakinvibe is currently offline  freakinvibe
Messages: 589
Registered: April 2004
Have you switched "Spam Filter" on in the Debug log? I have done this and get in the Debug log:

Quote:
[19/Aug/2013 09:18:28][1684] {spam} Message from <MyExternalEmail@hotmail.com> to <MyKerioAddress<_at_>mymailserver.com> matched body DENY rule: "FlabberFlub" test matched.


The mail never arrives in my Inbox. So I guess you have to open up a support case with Kerio.


Dexion Services AG - IT Support Services in Basel, Switzerland
https://dexionag.ch
Re: Custom SPAM rule for BODY not working [message #105619 is a reply to message #105614] Mon, 19 August 2013 13:51 Go to previous messageGo to next message
0ByteSolutions is currently offline  0ByteSolutions
Messages: 5
Registered: January 2013
Location: Naples, FL
Quote:
Have you switched "Spam Filter" on in the Debug log? I have done this and get in the Debug log:

Regardless of the debug log settings, the message still arrived in my inbox (and should not have). I will, however, check the settings anyway.

(BTW - where would I change that setting? Does such a setting exist?)

UPDATE:

I "upgraded" to the latest 8.1.3 (1711) and now the custom body rule (while set to reject is working). I'll check the "decrease score" setting now, again, as well.

[Updated on: Mon, 19 August 2013 14:00]

Report message to a moderator

Re: Custom SPAM rule for BODY not working [message #105626 is a reply to message #105514] Mon, 19 August 2013 16:11 Go to previous message
freakinvibe is currently offline  freakinvibe
Messages: 589
Registered: April 2004
Changeing the view settings in debug log does not change the behaviour, it just shows more or less messages in the debug log.

Dexion Services AG - IT Support Services in Basel, Switzerland
https://dexionag.ch
Previous Topic: Outlook 2013 Multiple MAPI Accounts
Next Topic: Outlook sent do not work
Goto Forum:
  


Current Time: Sun Apr 02 11:44:38 CEST 2023

Total time taken to generate the page: 0.03490 seconds