Jan Diblik

Hi, we got many spams daily to our Kaspersky Secure Mail Gateway. Mostly them are blocked properly (look first part of logs below). They are marked as SPAM. But sometimes many same emails pass by Kaspersky - everything is same - subject, message etc, just only name is different, but domain is same (look on logs below). It is marked as MASSMAIL - we dont remove them. I am not sure if I can even solve it :( . Or can you recommend me where can I ask for more details about behaviour below? Maybe get official support from Kaspersky? Jan 6 18:26:38 xxxxx klms-smtp_proxy: Message from <alexandertngawcn@toplulink.com> to <xxxxx@xxxxx> rejected Jan 6 18:26:38 xxxxxx KSMG: not clean: message-id="<vpxbhafbcon.kwkncwlladocvmsrkfaewaydrrxz@toplulink.com>": relay-ip="37.123.101.81": action="Rejected, Put in backup": backup-reason="AntiSpam": rules="1": size=3989: mail-from="alexandertngawcn@toplulink.com": rcpt-to="xxxxx@xxxxxxx": kt-status="NotScanned, disabled by settings", av-status="Clean", ap-status="Clean", as-status="Spam", as-method="headers plus", ma-status="NotScanned, disabled by settings", cf-status="Clean" Jan 4 10:26:53 xxxxx KSMG: not clean: message-id="<cdgobslafpgvwejjrezxhsdvg@toplulink.com>": relay-ip="37.123.101.80": action="Skipped, Put in backup": backup-reason="AntiSpam": rules="1": size=4559: mail-from="henrietagrfhhmc@toplulink.com": rcpt-to="xxxxxx@xxxxxx": kt-status="NotScanned, disabled by settings", av-status="Clean", ap-status="Clean", as-status="MASSMAIL", as-method="mass mail", ma-status="NotScanned, disabled by settings", cf-status="Clean" Jan 4 10:26:53 xxxxxx klms-smtp_proxy: Message from <henrietagrfhhmc@toplulink.com> to <xxxxx@xxxxxx> passed

An user configured “Request a Delivery Receipt” and “Request a Read Receipt” in Outlook. But sometimes he got an answer about confirmation of reading is marked as Blacklisted according DNSBL list. But if I check sender’s IP address - it is not in blacklist on these DNSBL servers. For example IP address: 136.143.191.44

Hi, it helped, thank you so much.

Hi, recently we found we have problem with access to UPS via HTTP when KASPERSKY ENDPOINT SECURITY is up. When KES is turned off, everything is working. We tried to add exception for UPS IP address anywhere in KASPERSKY CENTER like Trusted URLs etc, but not working. Same for any web browser. I tried to catch communication by wireshark and TCP SYN-ACK is working good, but after short while my or any computer RESET connection. Can anyone please help me with this because I do not wish to turn off Kaspersky everytime I need to access the UPS. Jan Sorry, It should be under Kaspersky Antivirus, not Kaspersky Total Security