ZyXEL Communications ZyWALL USG-Series - Page 249

Chapter 36 Anti-Spam
ZyWALL / USG (ZLD) CLI Reference Guide
249
36.2.1.1 Anti-spam Profile Example
This example shows how to configure (and display) a WAN to DMZ anti-spam profile to scan POP3
and SMTP traffic. SMTP spam is forwarded. POP3 spam is marked with a spam tag. The ZyWALL /
USG logs the event when an e-mail matches the DNSBL (see Section 36.2.3 on page 252 for more
on DNSBL). The white and black lists are ignored.
show anti-spam mail-scan query-timeout
pop3
Display the action the ZyWALL / USG takes on POP3 mail if querying the
mail scan server times out.
show anti-spam mail-scan query-timeout
time
Display how many seconds the ZyWALL / USG waits for a reply from the
mail scan server before taking the relevant timeout action.
show anti-spam mail-scan status Displays the ZyWALL / USG’s settings for IP reputation, mail content, and
virus outbreak checking.
show anti-spam tag query-timeout Display the label the ZyWALL / USG adds to the mail subject of e-mails
that it tags and forwards when queries to the mail scan servers time out.
show anti-spam xheader query-timeout Display the name and value for the X-Header the ZyWALL / USG adds to e-
mails that it tags and forwards when queries to the mail scan servers time
out.
Table 141 Commands for Anti-Spam Profile Rules (continued)
COMMAND DESCRIPTION
Router(config)# anti-spam 1
Router(config-as-rule-1)# activate
Router(config-as-rule-1)# scan smtp
Router(config-as-rule-1)# scan pop3
Router(config-as-rule-1)# match-action smtp forward
Router(config-as-rule-1)# match-action pop3 forward-with-tag
Router(config-as-rule-1)# log
Router(config-as-rule-1)# bypass white-list
Router(config-as-rule-1)# bypass black-list
Router(config-as-rule-1)# exit
Router(config)# show anti-spam 1
Anti-Spam Rule: 1
profile name: AS_profile_default_SXI
description:
log: log
scan protocols:
smtp: yes
pop3: yes
match action:
smtp: forward-with-tag
pop3: forward-with-tag
bypass white list: no
bypass black list: no
bypass ip reputation: no
bypass mail content: no
bypass virus outbreak: no
bypass dnsbl: no
ref: 0