APLawrence.com -  Resources for Unix and Linux Systems, Bloggers and the self-employed

Using Sieve for spam in Kerio Mailserver

Some material is very old and may be incorrect today

© December 2015 Anthony Lawrence


Both Kerio Webmail or Kerio Outlook Connector allow you to write your own message processing rules. These let you do such things as automatically put messages into specified folders, reject messages outright and so on. You create these rules with a rules wizard that lets you check off the desired conditions and actions. That looks like this:

webmail rule designer

Once you have created a rule with the rule designer, a new option appears: "Edit Script"

webmail rule edit choice webmail rule script editor

If you use that, you are actually editing a Sieve script. Sieve is a mail filtering language and editing the scripts directly allows you to do things that the wizard rule creator will not.

For example, let's say your users get spam mail that pretends to be from "[email protected]". You need to send them legitimate mail using that address, and you are concerned that they may be confused and unable to know whether the mail really was from you. Here's a rule that might help:

if allof (
  address :all :contains "From" "[email protected]",
  not header :contains "Received" "")
  fileinto "Junk E-mail";

This says if the mail says it comes from "[email protected]", but doesn't have a received header that matches your IP address, it's junk. You can't create that rule with the wizard because the wizard doesn't know about "header" matches. You probably need a more complex rule, but this is the basic idea.

Note this special note from Kerio's manual:

Rules tested against From and To headers have a peculiarity which might be beneficial. If these rules go before the others, they will be tested on level of SMTP traffic. In case of denial rules, messages matching such a rule are blocked even before accepted to the queue of incoming messages. This decreases the load on the server. It helps the server avoid taking several actions and using of several tools such as antispam tests and antivirus control which is applied once a message is accepted to the queue of incoming messages. In case of permission rules, no other rules are applied if they are tested on level of SMTP traffic.

Search Google for "sieve script examples" to find other folks scripts.

If you have access to the Kerio server itself, you can also edit user's "filter.siv" files with a text editor.

Pigeonhole Sieve examples

If you found something useful today, please consider a small donation.

Got something to add? Send me email.

(OLDER)    <- More Stuff -> (NEWER)    (NEWEST)   

Printer Friendly Version

-> Using Sieve for spam in Kerio Mailserver

Inexpensive and informative Apple related e-books:

Take Control of Automating Your Mac

iOS 8: A Take Control Crash Course

Take Control of Upgrading to El Capitan

Take Control of IOS 11

Photos for Mac: A Take Control Crash Course

More Articles by © Anthony Lawrence

Printer Friendly Version

Have you tried Searching this site?

This is a Unix/Linux resource website. It contains technical articles about Unix, Linux and general computing related subjects, opinion, news, help files, how-to's, tutorials and more.

Contact us

Printer Friendly Version

Security is mostly a superstition. It does not exist in nature, nor do the children of men as a whole experience it. Avoiding danger is no safer in the long run than outright exposure. Life is either a daring adventure, or nothing. (Helen Keller)

Linux posts

Troubleshooting posts

This post tagged:

Kerio Connect


Kerio Info

Kerio Pricing

Kerio RSS Feed



Unix/Linux Consultants

Skills Tests

Unix/Linux Book Reviews

My Unix/Linux Troubleshooting Book

This site runs on Linode