APLawrence.com -  Resources for Unix and Linux Systems, Bloggers and the self-employed

Using Sieve for spam in Kerio Mailserver

© May 2019 Anthony Lawrence


Both Kerio Webmail or Kerio Outlook Connector allow you to write your own message processing rules. These let you do such things as automatically put messages into specified folders, reject messages outright and so on. You create these rules with a rules wizard that lets you check off the desired conditions and actions. That looks like this:

webmail rule designer

Once you have created a rule with the rule designer, a new option appears: "Edit Script"

webmail rule edit choice webmail rule script editor

If you use that, you are actually editing a Sieve script. Sieve is a mail filtering language and editing the scripts directly allows you to do things that the wizard rule creator will not.

For example, let's say your users get spam mail that pretends to be from "support@yourcompany.com". You need to send them legitimate mail using that address, and you are concerned that they may be confused and unable to know whether the mail really was from you. Here's a rule that might help:

if allof (
  address :all :contains "From" "support@yourcompany.com",
  not header :contains "Received" "")
  fileinto "Junk E-mail";

This says if the mail says it comes from "support@yourcompany.com", but doesn't have a received header that matches your IP address, it's junk. You can't create that rule with the wizard because the wizard doesn't know about "header" matches. You probably need a more complex rule, but this is the basic idea.

Note this special note from Kerio's manual:

Rules tested against From and To headers have a peculiarity which might be beneficial. If these rules go before the others, they will be tested on level of SMTP traffic. In case of denial rules, messages matching such a rule are blocked even before accepted to the queue of incoming messages. This decreases the load on the server. It helps the server avoid taking several actions and using of several tools such as antispam tests and antivirus control which is applied once a message is accepted to the queue of incoming messages. In case of permission rules, no other rules are applied if they are tested on level of SMTP traffic.

Search Google for "sieve script examples" to find other folks scripts.

If you have access to the Kerio server itself, you can also edit user's "filter.siv" files with a text editor.

Pigeonhole Sieve examples

Got something to add? Send me email.

(OLDER)    <- More Stuff -> (NEWER)    (NEWEST)   

Printer Friendly Version

-> Using Sieve for spam in Kerio Mailserver

Inexpensive and informative Apple related e-books:

Take Control of High Sierra

Are Your Bits Flipped?

Take Control of iCloud

Take Control of Apple Mail, Third Edition

iOS 10: A Take Control Crash Course

More Articles by © Anthony Lawrence

Printer Friendly Version

Have you tried Searching this site?

This is a Unix/Linux resource website. It contains technical articles about Unix, Linux and general computing related subjects, opinion, news, help files, how-to's, tutorials and more.

Contact us

Printer Friendly Version

We are questioning more than the philosophy behind our dependence upon limited and limiting systems. We question the power structures that have grown up around such systems. (Frank Herbert)

Linux posts

Troubleshooting posts

This post tagged:

Kerio Connect


Kerio Info

Kerio Pricing

Kerio RSS Feed



Unix/Linux Consultants

Skills Tests

Unix/Linux Book Reviews

My Unix/Linux Troubleshooting Book

This site runs on Linode