Results 1 to 6 of 6

Thread: help me fix my spam issues please

  1. #1
    cornbread is offline Loyal Member
    Join Date
    Sep 2007
    Posts
    80
    Rep Power
    7

    Question help me fix my spam issues please

    I was an idiot and tried to tweak my spam filters when I first set up my zimbra install 2 or so yrs ago.

    We get a lot of spam not sure how it happened but I cringe every time I go to check my inbox.

    Also we have to check our spam folders because more often than not we get legitimate mail in our spam folder.

    I want to know if there is a way to reset spam filters and filter out all mail from major spamming countries etc.

    I just need a better way to manage it.

    I've only got around 15 users and I get complaints all the time.

    Any help would be appreciated!!!!!

    I seem to get a lot of these too:
    SUBJECT: (BANNED CONTENTS exe. ..........)
    BODY:
    BANNED CONTENTS ALERT

    Our content checker found
    banned name: .exe,.exe-ms,loader.exe

    in an email to you from:
    magnesium@reeds.com

    Content type: Banned
    Our internal reference code for your message is 29644-13/fOHcoM7DU8-v

    First upstream SMTP client IP address: [69.95.105.194]
    host-69-95-105-194.cwon.choiceone.net
    According to a 'Received:' trace, the message apparently originated at:
    [69.95.105.194], 69.95.105.194

  2. #2
    SpiderTech is offline Special Member
    Join Date
    Jan 2010
    Posts
    161
    Rep Power
    5

    Default

    Defining addresses to block and to allow in your mailbox

    Most filtering of unsolicited automated mail (aka "spam" or "junk mail") is handled by a spam filter before those mail messages reach your Inbox. This filtering helps to reduce the amount of junk email that is put in your Inbox.

    In addition to the automatic ZCS spam filtering rules, you can setup your mail preferences to identify specific addresses to block or not block in your Inbox. You create a list of addresses that should not be added to your Inbox and addresses that always should be added to your Inbox, but could be detected as spam. The spam filter uses this list to make sure you get the email you expect.

    How to set up your Junk Mail Options

    1. Go to Preferences and select the Mail folder.
    2. On the page that opens, scan to the Junk Mail Options section.
    3. Enter complete email addresses in the appropriate boxes, either Block messages from or Allow messages from. You can enter up to 100 addresses for each.
    4. Click Save on the toolbar.


    This can be done per user in Zimbra.
    Also check your hosted provider to see if they have a feature similar to PostIni that's is supplied by Google. They will have additional spam filtering capabilities.

    Hope this helped.
    Zimbra services hosted by The Message Center.

  3. #3
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,566
    Rep Power
    57

    Default

    Quote Originally Posted by cornbread View Post
    I was an idiot and tried to tweak my spam filters when I first set up my zimbra install 2 or so yrs ago.
    What 'tweaks' did you make to your system? Have you modified the Tag/Kill percentages and what are they set to? You need to post the full headers from some of the spam messages so we can see why it was, or wasn't, tagged as spam. Do you have DSPAM enabled?
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  4. #4
    ewilen's Avatar
    ewilen is offline Moderator
    Join Date
    Jun 2008
    Location
    Berkeley, CA
    Posts
    1,474
    Rep Power
    9

    Default

    cornbread, you've got multiple issues going on.

    You should listen to Phoenix, but I have a couple other things to bear in mind.

    First, if you upgrade your ZCS, it may clear out some of the tweaks you did. (Though not the tag/kill percentages, basically only more advanced tweaks that are only available using the CLI.)

    Second, the banned contents alerts are configured through the admin GUI, under Global Settings > Attachments. Also look under Global Settings > AS/AV to see if you want to block encrypted zip attachments.

    Third, if you want to indiscriminately filter out all mail from certain countries, you can use Global Settings > MTA > DNS Checks and use certain RBLs. I would recommend The DNSBL countries.nerd.dk Look at drbcheck: dr. Jrgen Mash's DNS database list checker and find the nerd.dk lists associated with the countries you want to block. For example, to block mail from China, use cn.countries.nerd.dk.

    NOTE: do not use blackholes.us. It's a dead list, and using it may result in all your incoming mail being bounced.

  5. #5
    uxbod's Avatar
    uxbod is offline Moderator
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    24

    Default

    Or use SA Relay-Countries and score based on that.

  6. #6
    fhouston is offline Active Member
    Join Date
    Feb 2008
    Posts
    39
    Rep Power
    7

    Default

    Quote Originally Posted by cornbread View Post
    We get a lot of spam not sure how it happened but I cringe every time I go to check my inbox.

    As far as cringing when going to your INBOX a filter that may help w/ this is "address in from not in my contacts" -> "file into [mailbox]". Of course you have to make sure your contacts are kept updated but this should theoretically keep the INBOX relatively spam free (keep in mind most spam generators use random email addr some of which may be in your contacts). Then you just have to check that [mailbox] occasionally to clear up what is in there. Also make sure this is always the last filter so it acts as a clean up sort of thing.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [SOLVED] Spam filtering/reporting issues
    By chauvetp in forum Administrators
    Replies: 1
    Last Post: 03-10-2010, 11:21 AM
  2. SPAM issues
    By ZAM in forum Users
    Replies: 6
    Last Post: 07-15-2009, 11:27 AM
  3. Major SPAM to one account
    By CarputerTech in forum Administrators
    Replies: 4
    Last Post: 09-04-2008, 10:54 PM
  4. [SOLVED] 5.0.4 Upgrade Issues - Logger, Shared Spam
    By Cryophallion in forum Administrators
    Replies: 13
    Last Post: 04-21-2008, 12:37 PM
  5. Spam issues with 3.1.0
    By FunkyPenguin in forum Administrators
    Replies: 6
    Last Post: 04-20-2006, 09:43 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •