GFI Software

Welcome to the GFI Software community forum! For support please open a ticket from https://support.gfi.com.

Home » GFI User Forums » Kerio Connect » SPAM system refuses whitelist & custom rules (SPAM system refuses whitelist & custom rules)
SPAM system refuses whitelist & custom rules [message #146873] Tue, 22 October 2019 14:05 Go to next message
60six is currently offline  60six
Messages: 17
Registered: June 2013
Throughout my 8 years experience with Kerio, the only useless part has always been the spam engine. We have put up with it for long enough but now I think we may need to move elsewhere.

I have added an IP to the whitelist, I have turned off .XLSX file scanning, I have added custom rules and placed them at the top, but STILL it blocks my .xlsx attachment.

What do I need to do to allow a single user from a single IP address to be TRUSTED AS NOT SPAM, EVER?

The only way the user could access this file that was needed was to send a dropbox link. Is the file large? NO - it's 22k.
Re: SPAM system refuses whitelist & custom rules [message #146874 is a reply to message #146873] Tue, 22 October 2019 15:16 Go to previous messageGo to next message
ian.bugeja is currently offline  ian.bugeja
Messages: 666
Registered: March 2017
Location: Malta
Hi

are you using the Custom Rules under Spam Filter?

In such rules, you can only base on From/To/CC headers and then mark as action Not Spam.

Please note that somebody could potentially spoof email addresses, and such emails would be allowed through.

Why do you block .xlsx files?


Ian Bugeja
GFI Software
Re: SPAM system refuses whitelist & custom rules [message #146886 is a reply to message #146873] Wed, 23 October 2019 16:26 Go to previous messageGo to next message
j.a.duke is currently offline  j.a.duke
Messages: 239
Registered: October 2006
Can you send some more details? Screenshots would be best. If you need to, you can fuzz out the confidential/private info.

I think we can help out a bit more with the additional infomation.

Also, I'm curious about the file name(s) that are being blocked.

Thanks.

Cheers,
Jon
Re: SPAM system refuses whitelist & custom rules [message #146890 is a reply to message #146874] Wed, 23 October 2019 17:41 Go to previous messageGo to next message
60six is currently offline  60six
Messages: 17
Registered: June 2013
Under virus protection I have unchecked *.xls* rule. Doesn't make a difference.

What do you need screenshots of? The most info I get is in the logs:

22/Oct/2019 12:16:45] Message rejected as malware spam, From: @@@@@@@.com, To: @@@@@@, Sender IP: @@@@@@@@<_at_>, Subject: Fwd: SPAM: Fwd: 2019-20 season version 5.xlsx, Message size: 24936

The IP has been added to a whitelist. The custom rules have a rule saying that my email address is legit.

I have now turned off attachment filter and virus scanning. STILL get the malware spam message.
Re: SPAM system refuses whitelist & custom rules [message #146891 is a reply to message #146890] Wed, 23 October 2019 21:12 Go to previous message
j.a.duke is currently offline  j.a.duke
Messages: 239
Registered: October 2006
So...I'm trying to figure out what might be going on with your configuration.

I did find a thread from earlier this year that might help:

https://forums.gfi.com/index.php?t=msg&th=37162&star t=0&

Some config file modifications to look at.

Also, the default rule in the attachment filter list is for doubled extensions: *.xls.* And this is only for "old" format Excel files. Now, my list might be pretty old and not have XLS* rules in it since I installed Kerio initially in 2006, so I'll try to look at a fresh install to see what's there.

In which log are you receiving the line you posted?

The other option is to add the sending IP to an IP Address Group (I have one labeled "Trustworthy Relays" which in turn lives in a "Exclude from Spam Scanning").

The Trustworthy list is excluded from Caller ID, SPF, Greylisting, & Spam Repellent. I'm not finding where I've used the Exclude list... but I'll keep looking.

Also, if you copied the line from the log, I'm not seeing the <_at_> sign after the Sender IP label.

Cheers,
Jon
Previous Topic: Help Need Better Email Filters in Kerio Connect
Next Topic: User ****** performed NTLM authentication in NT domain *****, this domain is not valid
Goto Forum:
  


Current Time: Mon May 29 14:58:07 CEST 2023

Total time taken to generate the page: 0.05633 seconds