REMARK
When several methods of analysis are used simultaneously, the highest score will be
assigned.
Advanced properties
The Antispam module on Stormshield Network UTM appliances does not delete messages that
are identified as spam. However, it modifies messages detected as spam in such a way that the
webmail client can process it in the future, for example. There are two ways of tagging messages:
Insert X-Spam headers When this option is selected, the Antispam module will add a header summarizing the
result of its analysis to messages identified as spam. The webmail client can then use
this antispam header, in “spam assassin” format, to perform the necessary actions on
the tagged message.
Reputation-based analysis
The DNS blacklist analysis or RBL (Real-time Blackhole List) enables identifying the message as
spam through RBL servers. The following menus allow configuring the list of RBL servers which
will be used for this analysis as well as the level of trust assigned to each of the servers.
List of DNS blacklist severs (RBL)
A table displays the list of RBL servers which the Firewall queries to check that an e-mail is not
spam. This list is updated by Active Update and cannot be modified, but certain servers can be
disabled by clicking on the checkbox at the start of each line (in the Enabled column).
The levels indicated in the columns of the table refer to the levels of trust assigned to the server.
You can also configure the RBL servers to which you would like your Firewall to connect. To add a
server, click on Add. A new line will appear. Up to 50 RBL servers can be defined.
Specify a name for this server (a unique name for the RBL server list), a DNS target (Field: Domain
name only, which should be a valid domain name), a level of trust (Low, Medium and High) and
comments (optional). Click on Apply.
To delete a configured server, select it in the list and click on Delete.
NOTE
RBL servers in Stormshield Network’s native configuration are differentiated from
customized servers by a padlock symbol ( ), which indicates RBL servers in Stormshield
Network’s native configuration.
Reminder: Active Update only updates the list of these servers.
Heuristic analysis
The heuristic analysis is based on VadeRetro's antispam engine. Using a set of calculations, this
antispam will derive a message’s degree of legitimacy.
The antispam module will calculate and assign a score that defines a message’s
“unwantedness”. E-mails that obtain a value exceeding or equal to the threshold set will be
considered Advertisement or Spam.
The heuristic analysis will then suggest adding a prefix to the subject of these e-mails, making it
possible, for example, to isolate them in a dedicated folder in the Mail Client.
Advertisement
In order to detect advertising e-mails, enable the option Detect advertising e-mails.
Page 37/448 sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
SNS - USER CONFIGURATION MANUAL V.3
ANTISPAM
To Next Page
Loading...
