Overview
When the Kerio Connect server is receiving a large number of emails, it might be an indication of traffic coming from blacklisted IP addresses or domain senders. As a result, user mailboxes become occupied with dozens of Spam messages. Thus, the Kerio Connect public IP address may become blacklisted by SORBS, WPBL, SpamCop, or SpamHaus.
This article provides the steps to resolve this blocking of spam emails using Kerio Connect's different built-in methods like Blacklists and Whitelists.
Solution
IP Black/White Lists
This method uses the IP address groups to block automatically, increase the spam score, or allow all messages originating from the IP on the list. This is configured under Spam Filter > Blacklists.
The predefined Internet Blacklists include SpamCop, SpamHaus, SORBS, and WPBL.
New custom blacklists can be added or the existing one can be modified. Also, it's possible to assign Block or Increase score by actions for specific blacklists.
Once the suspicious IP address is detected, Kerio Connect generates an entry in Security logs.
To double-check the valid status of Spam IP address detection, many of blacklist providers are offering online services to achieve that:
If the detection is incorrect, it's advisable to contact the Blacklist authority to confirm the possible false-positive alert.
IP Address Groups help easily define who has access to, for example, remote administration, services, and are used in additional settings in Kerio Connect like Blacklist/Whitelist.
