SPAM system refuses whitelist & custom rules [message #146873] |
Tue, 22 October 2019 14:05  |
60six
Messages: 17 Registered: June 2013
|
|
|
|
Throughout my 8 years experience with Kerio, the only useless part has always been the spam engine. We have put up with it for long enough but now I think we may need to move elsewhere.
I have added an IP to the whitelist, I have turned off .XLSX file scanning, I have added custom rules and placed them at the top, but STILL it blocks my .xlsx attachment.
What do I need to do to allow a single user from a single IP address to be TRUSTED AS NOT SPAM, EVER?
The only way the user could access this file that was needed was to send a dropbox link. Is the file large? NO - it's 22k.
|
|
|
|
Re: SPAM system refuses whitelist & custom rules [message #146886 is a reply to message #146873] |
Wed, 23 October 2019 16:26   |
j.a.duke
Messages: 239 Registered: October 2006
|
|
|
|
Can you send some more details? Screenshots would be best. If you need to, you can fuzz out the confidential/private info.
I think we can help out a bit more with the additional infomation.
Also, I'm curious about the file name(s) that are being blocked.
Thanks.
Cheers,
Jon
|
|
|
Re: SPAM system refuses whitelist & custom rules [message #146890 is a reply to message #146874] |
Wed, 23 October 2019 17:41   |
60six
Messages: 17 Registered: June 2013
|
|
|
|
Under virus protection I have unchecked *.xls* rule. Doesn't make a difference.
What do you need screenshots of? The most info I get is in the logs:
22/Oct/2019 12:16:45] Message rejected as malware spam, From: @@@@@@@.com, To: @@@@@@, Sender IP: @@@@@@@@<_at_>, Subject: Fwd: SPAM: Fwd: 2019-20 season version 5.xlsx, Message size: 24936
The IP has been added to a whitelist. The custom rules have a rule saying that my email address is legit.
I have now turned off attachment filter and virus scanning. STILL get the malware spam message.
|
|
|
Re: SPAM system refuses whitelist & custom rules [message #146891 is a reply to message #146890] |
Wed, 23 October 2019 21:12  |
j.a.duke
Messages: 239 Registered: October 2006
|
|
|
|
So...I'm trying to figure out what might be going on with your configuration.
I did find a thread from earlier this year that might help:
https://forums.gfi.com/index.php?t=msg&th=37162&star t=0&
Some config file modifications to look at.
Also, the default rule in the attachment filter list is for doubled extensions: *.xls.* And this is only for "old" format Excel files. Now, my list might be pretty old and not have XLS* rules in it since I installed Kerio initially in 2006, so I'll try to look at a fresh install to see what's there.
In which log are you receiving the line you posted?
The other option is to add the sending IP to an IP Address Group (I have one labeled "Trustworthy Relays" which in turn lives in a "Exclude from Spam Scanning").
The Trustworthy list is excluded from Caller ID, SPF, Greylisting, & Spam Repellent. I'm not finding where I've used the Exclude list... but I'll keep looking.
Also, if you copied the line from the log, I'm not seeing the <_at_> sign after the Sender IP label.
Cheers,
Jon
|
|
|