Mark Emails from External Senders [message #130831] |
Wed, 13 July 2016 01:28  |
SSSamS
Messages: 10 Registered: October 2015
|
|
|
|
My boss just learned what malware is and decided he wants any emails that we receive from external (non-employee) senders to be marked in the body of the email. Something like the following:
----EXTERNAL SENDER----
[Followed by normal body of email]
Even though I think this is a silly response to the problem (and we have implemented better measures to protect ourselves), I promised I would investigate if this specific function is even possible with Kerio Connect.
So the question is, can I implement anything in Kerio that would add the custom text to the body of emails we receive? I see in message filtering where I can add custom headers or modify subjects, but I have not been able to figure out a way to modify the body of an email.
And if there are good reasons why this is a poor idea (like adding text to an HTML email without breaking the formatting of the original email), then please let me know those as well.
Thanks.
|
|
|
Re: Mark Emails from External Senders [message #130922 is a reply to message #130831] |
Tue, 19 July 2016 04:25   |
sjwanta
Messages: 45 Registered: April 2012
|
|
|
|
No, Kerio does not have a feature that will allow you to modify the message body using specified rules. If you are using another MTA to relay mail to/from Kerio, you could use Mailscanner or something similar to do this.
|
|
|
Re: Mark Emails from External Senders [message #131659 is a reply to message #130922] |
Fri, 02 September 2016 13:02   |
Kedar
Messages: 356 Registered: April 2005
|
|
|
|
The modification of body is not possible for signed and/or encrypted messages. For the rest of messages, it can corrupt the formatting.
The Kerio Connect 9.x contains the new feature: server rules. With these filters (rules) you can modify subject, e.g. replace ${subject} with [External] ${subject} if the sender does not contain your domain name.
(WebAdmin -> Message Filters)
For more see http://kb.kerio.com/1831
[Updated on: Fri, 02 September 2016 14:53] Report message to a moderator
|
|
|
|
Re: Mark Emails from External Senders [message #146923 is a reply to message #146920] |
Tue, 29 October 2019 17:57   |
Bud Durland
Messages: 586 Registered: December 2013 Location: Plattsburgh, NY
|
|
|
|
acomper wrote on Tue, 29 October 2019 05:05Hi! I tried to use the message filtering as described, but unfortunately nothing happens: What I'm doing wrong?
If I recall correctly, In the filter rule, you can choose 'sender' or 'from' as the comparison. My assumption has always been that 'sender' is the e-mail address that is provided when the connection is first made to the server (the 'SMTP Envelope'), and the 'From' address is the one on the 'From:' line in the body of the e-mail. The two can be different. For your purpose, I think the 'sender' value is what you need to compare.
|
|
|
Re: Mark Emails from External Senders [message #147216 is a reply to message #146923] |
Mon, 09 December 2019 19:50   |
lluis20
Messages: 6 Registered: January 2017
|
|
|
|
We use the message filters for this exact thing. We use the From header to check that it does not contain <_at_>domain.com and we also check that the Subject does not contain [EXTERNAL], that way on replies it does not keep prepending to it and we have the action to be "Change header" of the subject to "[EXT] ${Subject}". The filtering rule is for any incoming emails so add it to the incoming rules on Kerio. Make sure you enable the rule and apply the filter at the bottom right of the screen.
|
|
|
Re: Mark Emails from External Senders [message #152121 is a reply to message #147216] |
Fri, 01 July 2022 16:49  |
Terrence
Messages: 12 Registered: February 2015
|
|
|
|
This is an old post. Are there any updates to this issue? It seems this rule might not work if the email address of the bad actor was spoofing as the bad actor can just add the domain in question as part of their name.
Confusion is the first step in understanding.
|
|
|