Message rejected as malware spam [message #151387] |
Tue, 05 April 2022 16:26  |
McIrish
Messages: 256 Registered: October 2011
|
|
|
|
I'm seeing some emails not coming through. They are being rejected, though the sender is in our whitelist. I "think" this might be a Bitdefender issue, but I'm not entirely sure. The email being rejected has some flight booking info in a pdf. If I have the recipient use a personal account, they get the email with attachments. If they then try to forward it to his domain email account, it's rejected. So, it's not the sender that is being blocked, but the attachments must be causing the issue.
How do I get around this? I can't have false positives rejecting email that is critical to what the company does. Any ideas on how to solve?
[Updated on: Tue, 05 April 2022 16:27] Report message to a moderator
|
|
|
|
|
|
|
Re: Message rejected as malware spam [message #151608 is a reply to message #151606] |
Wed, 11 May 2022 18:18   |
fishtech
Messages: 609 Registered: September 2010
|
|
|
|
It's not clear to me if it's being dropped as 'spam' or 'malware'.
I have Antivirus > 'Deliver the message with malicious code removed' selected. I would have though the user would get the message, but the message is just dropped.
I currently 5 to Spam Score for Bitdefender. I will change that to 4.
ft.
|
|
|
Re: Message rejected as malware spam [message #151631 is a reply to message #151387] |
Sun, 15 May 2022 09:22   |
AndreKl
Messages: 33 Registered: March 2018 Location: Germany
|
|
|
|
lately we have tons of internal email traffic marked as malware or phishing. Even really simple emails.
As we have another Spam/Phishing filter in front of Kerio, we disabled the Malware/Phishing filter in the mailserver.cfg but kept the rest on.
|
|
|
Re: Message rejected as malware spam [message #151673 is a reply to message #151631] |
Thu, 19 May 2022 19:08   |
brandonh75
Messages: 67 Registered: June 2011 Location: Burnsville, MN
|
|
|
|
Quote:lately we have tons of internal email traffic marked as malware or phishing. Even really simple emails.
As we have another Spam/Phishing filter in front of Kerio, we disabled the Malware/Phishing filter in the mailserver.cfg but kept the rest on.
We had to do this too...too many false positives lately.
|
|
|
|
Re: Message rejected as malware spam [message #152722 is a reply to message #152301] |
Wed, 21 September 2022 21:18   |
McIrish
Messages: 256 Registered: October 2011
|
|
|
|
Sorry to bring it up again. But this is still a huge issue. I have created a custom rule to allow the domain but emails are still getting detected as phishing or malware. In the most recent case, it's simple pdf files from a bank. Accounytants get pretty angry when you prevent them from getting banking info.
Any ideas on how to stop this from happening? I'm on 9.4.1
|
|
|
|
|