The spamfinder settings define how long a filtered mail stays in the queue before it will be deleted
A Quarantine Report can be enabled to inform the user about quarantined mails multiple times a day
The time for the report has to be in the format hh:mm, with each time in a new line, if no time is configured the quarantine report will not be generated
The display period (default 30 days) defines, how many last days are used for the E-Mail search in the initial view.
The higher the value, the longer will it take for the appliance to load the Queue List.
Use the search function to get listed entries behind that limitation.
The settings are saved with "Apply Settings"
Especially for updating the quarantine Report, an engine restart (Service) is required
Filter Types are descriped in the following document: Filter Types
Common
The appliance uses the built-in profile, if a filter profile was not (yet) assigned to the e-mail alias, or if licenses are not (or no longer) available.
The Default profile can also be used as long as enough Spamfinder licenses are available.
NON Delviery Reports can be activated, if you do NOT want to inform a sending mail server that an E-Mail was classified as Spam.
This also prevents floating your outgoing mail queue with undeliverable NDRs.
This Options refers exclusively to the filter action "Decline".
RBL-Filters (Realtime Blacklist Filters)
Here the DNS Filter lists are defined ti check incoming mail servers against a dns blacklist.
If necessary Relay hosts (if incoming mail is recieved by a relay host first, that should not be checked against a RBL Filter) can be configured as exclusion.
The name of your relay host is shown in the E-Mail Header (received from).
RBL Filter recommendations are listed in the FAQ.
You should use your own local DNS Server, because Public DNS Servers might not response correctly to RealTime Blacklist Filter queries.
Auto Whitelist Adjustment
Auto Whitelist Adjustment can be enabled, if the recipient E-Mail addresses should automatically added to the Address Whitelist.
The Validity for the whitelist address is defined in days (default is 90 days).
To prevent that the sender address of a spam sender is entered in the white list due to an automatic response of your mailbox, you can deny the white listing of any subjects, e.g. holiday, absence (out of office), etc.
To do so, enter a part or the entire subject into the subject exclusion field.
This setting applies globally for all users.
Virus Scanner
The Virus Scanner can be configured to send notification upon Virus Detection to Recipient, Sender and Administrator.
It is also possible to check in archives (as long as they are not password protected).
Extensions can further be denied completely (e.g. files like .exe .bat .dll and so on).
Mails that are blocked because of the listed file extensions will show up in the virus quarantine as .filextenstion.UNOFFICIAL.
It is highly recommended for companies to use multistage virus scanner, so that clients are protected with their own virus scanner.
The virus scanner can detect (and block if desired) a macro in documents directly, and in documents within compressed archives (even if Check in archives is not selected)
Additionally, the virus scanner can operate in three different modes.
Configure the operating mode that is needed:
- Scan all mails (incoming and outgoing): all mails are scanned in both directions
- Scan incoming mails only: only incoming mails are scanned, mails form trusted networks are not scanned
- Disable virus scan: the virus scanner is disabled, no emails are scanned, neither incoming nor outgoing
CISS Filter
With the CISS filter configuration, you can set the validity of the white list in days and the maximum challenges per sender.
Challenges are the attempts of the sender to send an e-mail to the recipient for the x-th time (default: 3 times).
Fuzzy Filter
The Fuzzy Filter mostly works full automatically.
Only when sending massively Emails like newsletters (=bulk), it can results in so called „False Positives“.
Here you can disable the "bulk detection" if this behaviour is not acceptable.
You can also disable the detection of dangerous attachments if this leads to false positives (e.g. for java script code).
Prevent Archiving
In this field, you can choose which filter(s) should prevent archiving of a mail.
This setting will only be applied to E-Mails that are moved to Quarantine Queue, it will not be applied to E-Mails that have been only tagged as spam and are delivered to the recipient.
If a mail is determined to be spam by a filter which is selected, the mail will not be archived.
If the spam E-mail is then sent out of quarantine queue (because it was mistakenly identified as spam), the archiving will take place afterwards.
Here you define which filters are allocated to a profile and which profiles are to be available to the user for selection.
Profiles set to "Available for Users" can be switched by the user if two or more filter profiles are available for the user.
A filter profile consists of positiv and negativ filters. The priority can be changed with arrows.
Filter action and filter tag in the filter profile can be edited with mouseclick.
Each positiv filter can override negative filters if desired.
The antispoofing filter should not be overridden by any filter and the action should not be set to decline!
The CISS filter needs to be overridden by the awl filter, to not sent CISS challanges to already whitelisted addresses.
Follwing filter actions are possible for filters:
- Quarantine: The E-Mail is moved to the quarantine queue
- Tagging: The E-Mail is delivered to the recipient with a tag in the subject
- Decline: The E-Mail is rejected
If several negative filters kick in, the action with the strongest weighting is triggered
Weighting sequence: TAG (light) - QUARANTINE (medium) - DECLINE (strong).
Filter profiles can be copied if you need to perform little changes to the profile, so that you do not need to configure the profile from scratch
The settings for changed filter profiles are applied with "Save".