Page 571 / 944 Scroll up to view Page 566 - 570
Chapter 34 Anti-Spam
ZyWALL USG 50 User’s Guide
571
34.4
The Anti-Spam Black List Screen
Click
Configuration > Anti-X
>
Anti-Spam > Black
/
White List
to display the
Anti-Spam Black List
screen.
Configure the black list to identify spam e-mail. You can create black list entries
based on the sender’s or relay server’s IP address or e-mail address. You can also
create entries that check for particular e-mail header fields with specific values or
Check White
List
Select this check box to check e-mail against the white list. The ZyWALL
classifies e-mail that matches a white list entry as legitimate (not
spam).
Check Black List
Select this check box to check e-mail against the black list. The ZyWALL
classifies e-mail that matches a black list entry as spam.
Check DNSBL
Select this check box to check e-mail against the ZyWALL’s configured
DNSBL domains. The ZyWALL classifies e-mail that matches a DNS
black list as spam.
Actions for
Spam Mail
Use this section to set how the ZyWALL is to handle spam mail.
SMTP
Select how the ZyWALL is to handle spam SMTP mail.
Select
drop
to discard spam SMTP mail.
Select
forward
to allow spam SMTP mail to go through.
Select
forward with tag
to add a spam tag to an SMTP spam mail’s
mail subject and send it on to the destination.
POP3
Select how the ZyWALL is to handle spam POP3 mail.
Select
forward
to allow spam POP3 mail to go through.
Select
forward with tag
to add a spam tag to an POP3 spam mail’s
mail subject and send it on to the destination.
OK
Click
OK
to save your changes.
Cancel
Click
Cancel
to exit this screen without saving your changes.
Table 165
Configuration > Anti-X > Anti-Spam > General > Add (continued)
LABEL
DESCRIPTION
Page 572 / 944
Chapter 34 Anti-Spam
ZyWALL USG 50 User’s Guide
572
specific subject text. Click a column’s heading cell to sort the table entries by that
column’s criteria. Click the heading cell again to reverse the sort order.
Figure 327
Configuration > Anti-X > Anti-Spam > Black/White List > Black List
The following table describes the labels in this screen.
Table 166
Configuration > Anti-X > Anti-Spam > Black/White List > Black List
LABEL
DESCRIPTION
General Settings
Enable Black List
Checking
Select this check box to have the ZyWALL treat e-mail that matches
(an active) black list entry as spam.
Black List Spam
Tag
Enter a message or label (up to 15 ASCII characters) to add to the
mail subject of e-mails that match the ZyWALL’s spam black list.
Rule Summary
Add
Click this to create a new entry.
Edit
Select an entry and click this to be able to modify it.
Remove
Select an entry and click this to delete it.
Activate
To turn on an entry, select it and click
Activate
.
Inactivate
To turn off an entry, select it and click
Inactivate
.
Status
The activate (light bulb) icon is lit when the entry is active and
dimmed when the entry is inactive.
#
This is the entry’s index number in the list.
Type
This field displays whether the entry is based on the e-mail’s subject,
source or relay IP address, source e-mail address, or header.
Content
This field displays the subject content, source or relay IP address,
source e-mail address, or header value for which the entry checks.
Apply
Click
Apply
to save your changes back to the ZyWALL.
Reset
Click
Reset
to return the screen to its last-saved settings.
Page 573 / 944
Chapter 34 Anti-Spam
ZyWALL USG 50 User’s Guide
573
34.4.1
The Anti-Spam Black or White List Add/Edit Screen
In the anti-spam
Black List
or
White List
screen, click the
Add
icon or an
Edit
icon to display the following screen.
Use this screen to configure an anti-spam black list entry to identify spam e-mail.
You can create entries based on specific subject text, or the sender’s or relay’s IP
address or e-mail address. You can also create entries that check for particular
header fields and values.
Figure 328
Configuration > Anti-X > Anti-Spam > Black/White List > Black List (or
White List) > Add
The following table describes the labels in this screen.
Table 167
Configuration > Anti-X > Anti-Spam > Black/White List > Black List
(or
White List) > Add
LABEL
DESCRIPTION
Enable Rule
Select this to have the ZyWALL use this entry as part of the black or
white list.
To actually use the entry, you must also turn on the use of the list in the
corresponding list screen, enable the anti-spam feature in the anti-spam
general screen, and configure an anti-spam policy to use the list.
Type
Use this field to base the entry on the e-mail’s subject, source or relay
IP address, source e-mail address, or header.
Select
Subject
to have the ZyWALL check e-mail for specific content in
the subject line.
Select
IP Address
to have the ZyWALL check e-mail for a specific
source or relay IP address.
Select
E-Mail Address
to have the ZyWALL check e-mail for a specific
source e-mail address or domain name.
Select
Mail Header
to have the ZyWALL check e-mail for specific
header fields and values. Configure black list header entries to check for
e-mail from bulk mail programs or with content commonly used in
spam. Configure white list header entries to allow certain header values
that identify the e-mail as being from a trusted source.
Mail Subject
Keyword
This field displays when you select the
Subject
type. Enter up to 63
ASCII characters of text to check for in e-mail headers. Spaces are not
allowed, although you could substitute a question mark (?). See
Section
34.4.2 on page 574
for more details.
Page 574 / 944
Chapter 34 Anti-Spam
ZyWALL USG 50 User’s Guide
574
34.4.2
Regular Expressions in Black or White List Entries
The following applies for a black or white list entry based on an e-mail subject, e-
mail address, or e-mail header value.
Use a question mark (?) to let a single character vary. For example, use “a?c”
(without the quotation marks) to specify abc, acc and so on.
You can also use a wildcard (*). For example, if you configure *def.com, any e-
mail address that ends in def.com matches. So “mail.def.com” matches.
The wildcard can be anywhere in the text string and you can use more than one
wildcard. You cannot use two wildcards side by side, there must be other
characters between them.
The ZyWALL checks the first header with the name you specified in the entry. So
if the e-mail has more than one “Received” header, the ZyWALL checks the first
one.
Sender or Mail
Relay IP
Address
This field displays when you select the
IP
type. Enter an IP address in
dotted decimal notation.
Netmask
This field displays when you select the
IP
type. Enter the subnet mask
here, if applicable.
Sender E-Mail
Address
This field displays when you select the
E-Mail
type. Enter a keyword (up
to 63 ASCII characters). See
Section 34.4.2 on page 574
for more
details.
Mail Header
Field Name
This field displays when you select the
Mail Header
type.
Type the name part of an e-mail header (the part that comes before the
colon). Use up to 63 ASCII characters.
For example, if you want the entry to check the “Received:” header for a
specific mail server’s domain, enter “Received” here.
Field Value
Keyword
This field displays when you select the
Mail Header
type.
Type the value part of an e-mail header (the part that comes after the
colon). Use up to 63 ASCII characters.
For example, if you want the entry to check the “Received:” header for a
specific mail server’s domain, enter the mail server’s domain here.
See
Section 34.4.2 on page 574
for more details.
OK
Click
OK
to save your changes.
Cancel
Click
Cancel
to exit this screen without saving your changes.
Table 167
Configuration > Anti-X > Anti-Spam > Black/White List > Black List
(or
White List) > Add
LABEL
DESCRIPTION
Page 575 / 944
Chapter 34 Anti-Spam
ZyWALL USG 50 User’s Guide
575
34.5
The Anti-Spam White List Screen
Click
Configuration > Anti-X
>
Anti-Spam > Black/White List
and then the
White List
tab to display the
Anti-Spam White List
screen.
Configure the white list to identify legitimate e-mail. You can create white list
entries based on the sender’s or relay’s IP address or e-mail address. You can also
create entries that check for particular header fields and values or specific subject
text.
Figure 329
Configuration > Anti-X > Anti-Spam > Black/White List > White List
The following table describes the labels in this screen.
Table 168
Configuration > Anti-X > Anti-Spam > Black/White List > White List
LABEL
DESCRIPTION
General Settings
Enable White List
Checking
Select this check box to have the ZyWALL forward e-mail that
matches (an active) white list entry without doing any more anti-
spam checking on that individual e-mail.
Rule Summary
Add
Click this to create a new entry. See
Section 34.4.1 on page 573
for
details.
Edit
Select an entry and click this to be able to modify it. See
Section
34.4.1 on page 573
for details.
Remove
Select an entry and click this to delete it.
Activate
To turn on an entry, select it and click
Activate
.
Inactivate
To turn off an entry, select it and click
Inactivate
.
Status
The activate (light bulb) icon is lit when the entry is active and
dimmed when the entry is inactive.
#
This is the entry’s index number in the list.

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top