GFI Software

Welcome to the GFI Software community forum! For support please open a ticket from https://support.gfi.com.

Home » GFI User Forums » Kerio Connect » Mark Emails from External Senders
Mark Emails from External Senders [message #130831] Wed, 13 July 2016 01:28 Go to next message
SSSamS is currently offline  SSSamS
Messages: 10
Registered: October 2015
My boss just learned what malware is and decided he wants any emails that we receive from external (non-employee) senders to be marked in the body of the email. Something like the following:

----EXTERNAL SENDER----
[Followed by normal body of email]


Even though I think this is a silly response to the problem (and we have implemented better measures to protect ourselves), I promised I would investigate if this specific function is even possible with Kerio Connect.

So the question is, can I implement anything in Kerio that would add the custom text to the body of emails we receive? I see in message filtering where I can add custom headers or modify subjects, but I have not been able to figure out a way to modify the body of an email.

And if there are good reasons why this is a poor idea (like adding text to an HTML email without breaking the formatting of the original email), then please let me know those as well.

Thanks.
Re: Mark Emails from External Senders [message #130922 is a reply to message #130831] Tue, 19 July 2016 04:25 Go to previous messageGo to next message
sjwanta is currently offline  sjwanta
Messages: 45
Registered: April 2012
No, Kerio does not have a feature that will allow you to modify the message body using specified rules. If you are using another MTA to relay mail to/from Kerio, you could use Mailscanner or something similar to do this.
Re: Mark Emails from External Senders [message #131659 is a reply to message #130922] Fri, 02 September 2016 13:02 Go to previous messageGo to next message
Kedar
Messages: 356
Registered: April 2005
The modification of body is not possible for signed and/or encrypted messages. For the rest of messages, it can corrupt the formatting.

The Kerio Connect 9.x contains the new feature: server rules. With these filters (rules) you can modify subject, e.g. replace ${subject} with [External] ${subject} if the sender does not contain your domain name.
(WebAdmin -> Message Filters)

For more see http://kb.kerio.com/1831

[Updated on: Fri, 02 September 2016 14:53]

Report message to a moderator

Re: Mark Emails from External Senders [message #146920 is a reply to message #131659] Tue, 29 October 2019 10:05 Go to previous messageGo to next message
acomper is currently offline  acomper
Messages: 1
Registered: October 2019
Hi! I tried to use the message filtering as described, but unfortunately nothing happens: What I'm doing wrong?
Re: Mark Emails from External Senders [message #146923 is a reply to message #146920] Tue, 29 October 2019 17:57 Go to previous messageGo to next message
Bud Durland is currently offline  Bud Durland
Messages: 582
Registered: December 2013
Location: Plattsburgh, NY
acomper wrote on Tue, 29 October 2019 05:05
Hi! I tried to use the message filtering as described, but unfortunately nothing happens: What I'm doing wrong?
If I recall correctly, In the filter rule, you can choose 'sender' or 'from' as the comparison. My assumption has always been that 'sender' is the e-mail address that is provided when the connection is first made to the server (the 'SMTP Envelope'), and the 'From' address is the one on the 'From:' line in the body of the e-mail. The two can be different. For your purpose, I think the 'sender' value is what you need to compare.
Re: Mark Emails from External Senders [message #147216 is a reply to message #146923] Mon, 09 December 2019 19:50 Go to previous messageGo to next message
lluis20 is currently offline  lluis20
Messages: 6
Registered: January 2017
We use the message filters for this exact thing. We use the From header to check that it does not contain <_at_>domain.com and we also check that the Subject does not contain [EXTERNAL], that way on replies it does not keep prepending to it and we have the action to be "Change header" of the subject to "[EXT] ${Subject}". The filtering rule is for any incoming emails so add it to the incoming rules on Kerio. Make sure you enable the rule and apply the filter at the bottom right of the screen.
Re: Mark Emails from External Senders [message #152121 is a reply to message #147216] Fri, 01 July 2022 16:49 Go to previous message
Terrence is currently offline  Terrence
Messages: 12
Registered: February 2015
This is an old post. Are there any updates to this issue? It seems this rule might not work if the email address of the bad actor was spoofing as the bad actor can just add the domain in question as part of their name.

Confusion is the first step in understanding.
Previous Topic: Server Error in web client
Next Topic: 9.4.1-6445-p1: logfiles with linebreaks
Goto Forum:
  


Current Time: Thu Aug 18 18:05:14 CEST 2022

Total time taken to generate the page: 0.02826 seconds