Zimbra

ej.hometask · #1 (**permalink**) 06-18-2009, 10:44 AM

We use the free web version of zimbra. We are getting inundated with spam emails and want to know if we should increase our kill/tag percents?

They are currently set on Kill: 75 and Tag: 33

Any consequences to jumping Kill percent to 80, 85, 90??? Or better to just increase the tag percent?

Or are we completely off base and is there a better solution for this problem?

We are new to this, any advice is helpful. Thanks in Advance!!!

phoenix · #2 (**permalink**) 06-18-2009, 11:25 AM

Quote:

Originally Posted by ej.hometask

We use the free web version of zimbra. We are getting inundated with spam emails and want to know if we should increase our kill/tag percents?

They are currently set on Kill: 75 and Tag: 33

Any consequences to jumping Kill percent to 80, 85, 90??? Or better to just increase the tag percent?

Or are we completely off base and is there a better solution for this problem?

We are new to this, any advice is helpful. Thanks in Advance!!!

Increasing the Kill or Tag percentages will allow more spam through, I have mine set to 66/25 for Kill/Tag respectively. Have a look at this wiki article and see if there's anything that you might find helpful, look at the "Discarding Emails Sent to Invalid Addresses" option - that should get rid of a lot of mail to invalid addresses. You caould also add RBLs, do you have any set already? How about backscatter spam, have a search of the forums for 'backscatter' for some techniques to get rid of it. That should do for a start but in any further investigation we'd need to see some spam mail headers to see what's happening.

ej.hometask · #3 (**permalink**) 06-18-2009, 11:32 AM

So the kill/tag percent values are for the amount of emails it will SEND THROUGH? That is anything but intuitive. I will check out your other options.....thank you.

Ps. did you mean to include an article??

ej.hometask · #4 (**permalink**) 06-18-2009, 11:39 AM

I looked up the RBLs and that is all stuff that has to be changed in the coding. I don't have access for that. I need a solution that I can get to from the zimbraAdmin portal (which, I am learning, has very limited functionality). Any other suggestions? Thanks much.

phoenix · #5 (**permalink**) 06-18-2009, 12:34 PM

Quote:

Originally Posted by ej.hometask

So the kill/tag percent values are for the amount of emails it will SEND THROUGH? That is anything but intuitive. I will check out your other options.....thank you.

Ps. did you mean to include an article??

Yes I did, sorry about the missing link: Improving Anti-spam system - Zimbra :: Wiki

The kill/tag percentages aren't counter intuitive. If you consider that an incoming message is scanned for any traits that make it look like spam and each of those traits is given a score. When the total exceeds that kill/tag percentages it is either marked as spam or killed (i.e. deleted), so the lower the kill/tag percentages the more likely it will be that the mail is caught as spam or possible spam and the higher the percentages the less likely it is to be caught.

Quote:

Originally Posted by ej.hometask

I looked up the RBLs and that is all stuff that has to be changed in the coding. I don't have access for that. I need a solution that I can get to from the zimbraAdmin portal (which, I am learning, has very limited functionality). Any other suggestions? Thanks much.

The RBLs are set in the Admin UI, most of the other changes are via modifications to the config files. Which RBLs do you have defined?

ej.hometask · #6 (**permalink**) 06-18-2009, 12:37 PM

I'm not sure about the RBLs, where do I find that info?

I don't know how to explain what it is that I have access to, but its just a web portal that I log into titled "Zimbra(TM) Administration Console: Manage Accounts". So I can do things like add/edit accounts, distis, etc and I have a handful of "global settings", one of which is AS/AV with my Kill/Tag boxes and an 'Antivirus definition update frequency' box.

So I don't think I can do things like modifying config files....

phoenix · #7 (**permalink**) 06-18-2009, 12:46 PM

You'll find it on the Global Settings/MTA tab, which version of ZImbra are you using? Could you update your forum profile with the output of the following:

Code: