eScan BlogeScan Blog    eScan WebsiteeScan Website    eScan ForumeScan Forum    eScan FeedseScan Feeds     
    
Languages:     

From eScan Wiki

(Difference between revisions)
Jump to: navigation, search
Revision as of 05:58, 29 December 2012
Webmktg (Talk | contribs)

← Previous diff
Current revision
Webmktg (Talk | contribs)
('''Anti-Spam''')
Line 7: Line 7:
<span class="plainlinks neverexpand"><div style="text-align: right;">[[Escan/english/escan14|Back]]</div></span><br/> <span class="plainlinks neverexpand"><div style="text-align: right;">[[Escan/english/escan14|Back]]</div></span><br/>
-=='''Mail Anti-Virus'''==+=='''Anti-Spam'''==
-This section provides the description and settings of eScan's Mail Anti-Virus for scanning of emails.+This section provides the decription and settings of eScan's Anti-Spam for scanning of spam / junk emails.
Line 16: Line 16:
=='''Description'''== =='''Description'''==
-Mail Anti-Virus is the second module of the eScan for ISS. This module scans all incoming and outgoing e-mails for viruses, spyware, adware, and other malicious objects. It helps you send virus warnings to client computers on the Mail Anti Virus activities. By default, Mail Anti Virus scans only the incoming e mails and attachments, but you can configure it to scan outgoing e-mails and attachments as well. Moreover, it helps you notify the sender or system administrator, whenever you receive an infected e-mail or attachment. +Anti-Spam is the third module of the eScan for ISS. This module filters all your junk and spam e mails by using the NILP technology and sends content warnings to specified recipients.
&nbsp; &nbsp;
-[[Image:Mail Anti-virus window - Online help.jpg|center]]+[[Image:ISS-Mail Anti-virus.jpg|center]]
&nbsp; &nbsp;
-This page provides you with options required for configuring the module. You can configure the settings from the following 2 sections:+This page provides you with options required to configure the module. You can configure the settings from the following 2 sections:
=='''Configuration'''== =='''Configuration'''==
This section displays the following information. This section displays the following information.
-- '''Mail Anti-Virus Status''' : It displays the status of whether Mail Anti-Virus module is started or stopped.+- '''Anti-Spam Status''' : It displays the status of whether Anti-Spam module is started or stopped.
-- '''Action''' : It displays the type of action set in the Mail Anti-Virus module.+- '''Mail Phishing Filter''' : It displays the status of Mail phishing filter.
 + 
 +- '''Action''' : It displays the type of action taken by Anti-Spam module.
'''Start/Stop:''' '''Start/Stop:'''
-Click an appropriate option to enable or disable Mail Anti-Virus module.+Click an appropriate option to enable or disable Anti Spam module.
'''Settings:''' '''Settings:'''
-When you click this button, the '''Mail Anti-Virus Settings''' window appears. On the '''Mail Anti-Virus Settings''' window, you have two tabs – Scan Options and Archiving which are as follows:+When you click this button, the '''Anti-Spam Settings''' window appears. On the '''Anti-Spam Settings''' window, you have two tabs – Advanced and Disclaimer, which are as follows:
::<B><U>Note</U>:</B> On below the screen of all the tabs contains four buttons — Default, OK, Cancel, and Apply, which you have to use after configuring the settings based on your requirement. ::<B><U>Note</U>:</B> On below the screen of all the tabs contains four buttons — Default, OK, Cancel, and Apply, which you have to use after configuring the settings based on your requirement.
:::: - '''Default:''' Click this button to apply the default settings. :::: - '''Default:''' Click this button to apply the default settings.
-:::: - '''OK:''' Click this button after you click the Apply button to apply the configured settings. +:::: - '''OK:''' Click this button after you click the '''Apply''' button to apply the configured settings.
:::: - '''Cancel:''' Click this button to cancel the configured settings or to close the window. :::: - '''Cancel:''' Click this button to cancel the configured settings or to close the window.
:::: - '''Apply:''' Click this button to apply the configured settings. :::: - '''Apply:''' Click this button to apply the configured settings.
-*'''Scan Options'''+*'''Advanced'''
-This tab allows you to select the e-mails to be scanned and action that should be performed when a security threat is encountered during a scan operation.+This section provides you with options for configuring the general e mail options, spam filter configuration, and tagging e-mails in Anti Spam.
&nbsp; &nbsp;
-[[Image:MA - Scan options.jpg|center]]+[[Image:Anti-spam Settings - Advanced.jpg|center]]
&nbsp; &nbsp;
This tab helps you configure the following settings: This tab helps you configure the following settings:
-- '''Block Attachments Types:''' This section provides you with a pre-defined list of file types that are often used by virus writers to embed viruses. Any e mail attachment having an extension included in this list will be blocked or deleted by eScan at the gateway level. You can add file extensions to this list as per your requirement. As a best practice, you should avoid deleting the file extensions that are present in the '''Block Attachments Types''' list by default. You can also configure advanced settings required to scan e mails for malicious code.+- '''Send Original Mail to User:''' [Default] This check box is selected by default. eScan creates Spam folder within the e mail client. When an e mail is tagged as Spam, it is moved to this folder. Select this check box, if you want to send original e mail that is tagged as spam to the recipient as well.
-'''-->''' '''Advanced:''' You can click this button to open the '''Advanced Scan Options''' dialog box. This dialog box helps you configure the following advanced scanning options: +- '''Do not check content of Replied or Forwarded Mails:''' Select this check box, if you want to ensure that eScan does not check the contents of e mails that you have either replied or forwarded to other recipients.
-&nbsp;'''>>''' '''Delete all Attachment in eMail if disinfection is not possible:''' Select this check box if you want to delete all the e mail attachments that cannot be cleaned.+- '''Check Content of Outgoing mails:''' Select this check box, if you want Anti-Spam to check outgoing e mails for restricted content.
-&nbsp;'''>>''' '''Delete entire eMail if disinfection is not possible:''' [Default] Select this check box if you want to delete the entire e mail if any attachment cannot be cleaned.+'''-->''' '''Phrases:''' You can click the '''Phrases''' button to open the '''Phrases''' dialog box. This dialog box helps you configure additional e mail-related options. In addition, it allows you to specify a list of words that the user can either allow or block. This list is called the '''user specified whitelist'''. You can specify certain words or phrases, so that mails containing those words or phrases in the subject, header, or body are recognized as spam and are quarantined or deleted. All the fields are available only when you select the '''Enable E-mail Content Scanning''' check box. The dialog box uses the following color codes to categorize e-mails.
-&nbsp;'''>>''' '''Delete entire eMail if any virus is found:''' Select this check box if you want to delete the entire e mail if any virus is found in the email or the attachment is infected.+&nbsp;'''>>''' '''User specified whitelist of words/phrases:''' (Color Code: '''GREEN''') Click this option to list the words or phrases that are present in the whitelist. A phrase that is added to the whitelist cannot be edited, enabled, or disabled.
-&nbsp;'''>>''' '''Quarantine blocked Attachments:''' [Default] Select this check box if you want to quarantine the attachment if it has an extension that is blocked by eScan. +&nbsp;'''>>''' '''User specified List of Blocked words/phrases:''' (Color Code: '''RED''') Click this option to list the words or phrases that are defined in block list.
-&nbsp;'''>>''' '''Delete entire eMail if any blocked attachment is found:''' [Default] Select this check box if you want to delete an e mail if it contains an attachment with an extension type that is blocked by eScan.+&nbsp;'''>>''' '''User specified words/phrases disabled:''' (Color Code: '''GRAY''') Click this option to list the words or phrases that are defined excluded during scans. The options in the '''Phrases to Check''' dialog box are disabled by default.
-&nbsp;'''>>''' '''Quarantine eMail if attachments are not scanned:''' Select this check box if you want to quarantine an entire e mail if it contains an attachment that is not scanned by Mail Anti Virus. 
-&nbsp;'''>>''' '''Quarantine Attachments if they are not scanned:''' Select this check box if you want to quarantine attachments that are not scanned by Mail Anti Virus.+- '''Spam Filter Configuration:''' This section provides you with options for configuring the spam filter. All options in this section are selected by default.
-&nbsp;'''>>''' '''Exclude Attachments (Whitelist):''' This list is empty by default. You can add file names and file extensions that should not be blocked by eScan. You can also configure eScan to allow specific files even though if the file type is blocked. For example, if you have listed *.PIF in the list of blocked attachments and you need to allow an attachment with the name ABC, you can add Abc.pif to the Exclude Attachments list. Add *.PIF files in this section will allow all *.PIF to be delivered. MicroWorld recommends you to add the entire file name like ABCD.PIF.+'''-->''' '''Check for Mail Phishing:''' [Default] Select this check box, if you want Anti-Spam to check for fraudulent e-mails and quarantine them.
 +'''-->''' '''Treat Mails with Chinese /Korean character set as SPAM:''' [Default] When this check box is selected, eScan scans e mails with Chinese or Korean characters. This check is based on the research data conducted by MicroWorld’s various spam e mail samples collected from around the globe. From these samples, it was observed that spammers often use Chinese or Korean characters in their e mails.
-- '''Action:''' This section helps you configure the actions to be performed on infected e mails. +'''-->''' '''Treat Subject with more than five whitespaces as SPAM:''' [Default] In its research, MicroWorld found that spam e-mails usually contain more than five consecutive white spaces. When this check box is selected, Anti Spam checks the spacing between characters or words in the subject line of e mails and treats e mails with more than five whitespaces in their subject lines as spam e mails.
-'''-->''' '''Disinfect:''' [Default] Click this option if you want Mail Anti-Virus to disinfect infected e mails or attachments.+'''-->''' '''Check content of HTML mails:''' [Default] Select this check box when you want Anti-Spam to scan e-mails in HTML format along with textual content.
-'''-->''' '''Delete:''' Click this option if you want Mail Anti-Virus to delete infected e mails or attachments.+'''-->''' '''Quarantine Advertisement mails:''' [Default] Select this check box when you want Anti-Spam to check for advertisement types of e-mails and quarantine them.
-'''-->''' '''Quarantine Infected Files:''' [Default] Select this check box if you want Mail Anti-Virus to quarantine infected e mails or attachments. The default path for storing quarantined e mails or attachments is C:\Program Files\eScan\QUARANT. However, you can specify a different path for storing quarantined files, if required.+&nbsp;'''>>''' '''Advanced:''' Click this button to open the '''Advanced Spam Filtering Options''' dialog box. This dialog box helps you configure the following advanced options for controlling spam.
 +&nbsp;'''-->>''' '''Enable Non Intrusive Learning Pattern (NILP) check:''' [Default] NILP is MicroWorld’s revolutionary technology that uses Bayesian Filtering and works on the principles of Artificial Intelligence (AI) to analyze each e mail and prevents spam and phishing e mails from reaching your inbox. It has self-learning capabilities and it updates itself by using regular research feeds from MicroWorld servers. It uses an adaptive mechanism to analyze each e mail and categorize it as spam or ham based on the behavioral pattern of the user. Select this check box if you want to enable NILP check.
-- '''Port Settings for eMail:''' You can also specify the ports for incoming and outgoing e mails, so that eScan can scan the e mails sent or received through those ports.+&nbsp;'''-->>''' '''Enable eMail Header check:''' [Default] Select this check box if you want to check the validity of certain generic fields, such as From, To, and CC in an e mail and marks it as spam if any of the headers are invalid.
-'''-->''' '''Outgoing Mail (SMTP):''' [Default: 25] You need to specify a port number for SMTP. +&nbsp;'''-->>''' '''Enable X Spam Rules check:''' [Default] X Spam Rules are rules that describe certain characteristics of an e mail. It checks whether the words in the content of e mails are present in eScan’s database. This database contains a list of words and phrases, each of which is assigned a score or threshold. The X Spam Rules Check technology matches X Spam Rules with the mail header, body, and attachments of each e mail to generate a score. If the score crosses a threshold value, the mail is considered as spam. Anti Spam refers to this database to identify e mails and takes action on them.
-'''-->''' '''Incoming Mail (POP3):''' [Default: 110] You need to specify a port number for POP3. +&nbsp;'''-->>''' '''Enable Sender Policy Framework (SPF) check:''' SPF is a world standard framework that is adopted by eScan to prevent hackers from forging sender addresses. It acts a powerful mechanism for controlling phishing mails. Select this check box if you want Anti-Spam to check the SPF record of the sender’s domain. However, your computer should be connected to the Internet for this option to work.
-'''-->''' '''Scan Outgoing Mails:''' Select this check box if you want the Mail Anti-Virus to scan outgoing e-mails.+&nbsp;'''-->>''' '''Enable Spam URI Realtime Blacklist (SURBL) check:''' Select this check box if you want Anti-Spam to check the URLs in the message body of an e-mail. If the URL is listed in the SURBL site, the e-mail will be blocked from being downloaded. However, your computer should be connected to the Internet for this option to work.
 +&nbsp;'''-->>''' '''Enable Realtime Blackhole List (RBL) check:''' Select this check box if you want Anti-Spam to check the sender’s IP address in the RBL sites. If the sender IP address is blacklisted in the RBL site, the e-mail will be blocked from being downloaded. However, your computer should be connected to the Internet for this option to work.
-*'''Archiving'''+&nbsp;'''-->>''' '''RBL Servers:''' RBL is a DNS server that lists IP addresses of known spam senders. If the IP of the sender is found in any of the blacklisted categories, the connection is terminated. The RBL Servers list contains addresses of servers and sites that maintain information regarding spammers. You can add or delete address in the list as per your requirement.
-This screen helps you configure settings for archiving e mails and e mail attachments.+ 
 +&nbsp;'''-->>''' '''Auto Spam Whitelist:''' Unlike normal RBLs, SURBL scans e mails for names or URLs of spam Web sites in the message body. It terminates the connection if the IP of the sender is found in any of the blacklisted categories. This contains a list of valid e-mail addresses that can bypass the above Spam filtering options. It thus allows e-mails from the whitelist to be downloaded to the recipient’s inbox. You can add or delete address in the list as per your requirement.
 + 
 + 
 +- '''Mail Tagging Options:''' Anti Spam also includes some mail tagging options, which are described as follows:
 + 
 +'''-->''' '''Do not change email at all:''' Click this option if you want to prevent Anti Spam from adding the [Spam] tag to e mails that have been identified as spam.
 + 
 +'''-->''' '''Both subject and body is changed: [Spam] tag is added in Subject: Actual spam content is embedded in Body:''' This option helps you identify spam e mails. When you select this option, Anti Spam adds a [Spam] tag in the subject line and the body of the e mail that has been identified as spam.
 + 
 +'''-->''' ''' "X MailScan Spam: 1" header line is added: Actual spam content is embedded in Body:''' This option helps you add a [Spam] tag in the body of the e mail that has been identified as spam. In addition, it adds a line in the header line of the e mail.
 + 
 +'''-->''' '''Only [Spam] tag is added in Subject: Body is left unchanged:''' [Default] This option helps you add the [Spam] tag only in the subject of the e mail, which has been identified as spam.
 + 
 +'''-->''' ''' "X MailScan Spam: 1" header line is added: Body and subject both remain unchanged:''' This option helps you add a header line to the e mail. However, it does not add any tag to the subject line or body of the e mail.
 + 
 + 
 +*'''Disclaimer'''
 +
 +The disclaimer is a footer or signature that is appended to all e-mails. The disclaimer can be added in the space provided.
&nbsp; &nbsp;
-[[Image:MA - Archiving.jpg|center]]+[[Image:Anti-spam Settings - Disclaimer.jpg|center]]
&nbsp; &nbsp;
-The following configuration options are available on this screen:+The '''Disclaimer''' tab helps you configure the following settings.
 + 
 +- '''Add Disclaimer to Outgoing Mails:''' Select this check box if you want to add a disclaimer to all outgoing mails. This helps to make the recipient aware that the e mail is scanned and free of viruses.
-- '''Archive eMails:''' This option helps you archive or back up all scanned e mails that you have sent or received. Mail Anti-Virus provides you with the facility of backing up your e mails to a given folder. The default path for storing archived e mails is %appdata%\MicroWorld\eScan\Archive. By default, the '''eMail Archive Directory''' field, '''View Archived eMails''' button, and '''Browse''' button appears dimmed. It is available only when you select the Archive eMails check box. Select the '''Archive eMails''' check box to specify the path of the backup folder. You can type or click the '''Browse''' button to select the path. Click the '''View Archived eMails''' button, to view the list of archived e-mails. +- '''Add Disclaimer to Incoming Mails:''' Select this check box if you want to add a disclaimer to all incoming mails. Thus, you make the recipient aware that the e-mail is scanned and free of viruses. You can add a custom disclaimer by either typing the text of the disclaimer in the Disclaimer box or by selecting the file containing the disclaimer text by clicking '''Browse'''.
-- '''Archive Attachments:''' Select this check box if you want to archive or back up all sent or received e mail attachments to a given folder. However, to specify the path of the backup folder, you need to select the '''Archive Attachments''' check box. By default, the '''Attachments Archive Directory''' check box, Do not Archive attachments of type check box, and '''Browse''' button appears dimmed. These fields are available only when you select the '''Archive Attachments''' check box. The default path for storing archived e-mail attachments is %AppData%\MicroWorld\eScan\Archive\Attachments. At times, you may not require e-mail attachments of a specific file type. In that case, you can excluded certain file types, such as *.VCF, *.HTM, and *.HTML, from being archived by adding them to the '''Do not Archive attachments of type''' list. +- '''Exclude Disclaimers in Mails to Following Receivers:''' By default, this section appears dimmed, it is available only when you select '''Add Disclaimer to Outgoing Mails''' check box. It enables you to restrict Anti Spam from appending the disclaimer to specific mail addresses or domains by adding them to a list.
-'''Notification:''' +'''Notification:'''
-You can click this button to open the '''Notification Settings''' dialog box, which helps you configure the notification settings for the Mail Anti Virus module. By configuring this module, you can send e mails to specific recipients when malicious code is detected in an e-mail or e-mail attachment. This dialog box helps you configure the notification settings for sending alerts and warning messages to the senders or recipients of an infected message.+This button opens the '''Notification Settings''' dialog box. You can configure the notification settings for the Anti Spam module by using this dialog box. By configuring this module, you can send e mails to specific recipients when a particular event occurs.
&nbsp; &nbsp;
-[[Image:Notification settings window.jpg|center]]+[[Image:Anti-spam Settings - Notification Settings.jpg|center]]
&nbsp; &nbsp;
-You can configure the following notification settings:+The warning notification settings that you can configure on this screen are as follows:
- '''Virus Alerts''' - '''Virus Alerts'''
 +
 +'''-->''' '''Show Alert Dialog-box:''' [Default] Select this check box if you want Anti-Spam to display an alert box notifying you of a virus infection.
-'''-->''' '''Show Alert Dialog-box:''' [Default] Select this check box if you want Mail Anti-Virus to alert you when it detects a malicious object in an e-mail. +'''-->''' '''Attachment Removed Warning To Sender:''' [Default] Select this check box if you want Anti Spam to send a warning message to the sender of an infected attachment. Anti Spam sends this e-mail when it encounters a virus-infected attachment in an e-mail. The content of the e-mail that is sent is displayed in the preview box.
-'''-->''' '''Attachment Removed Warning To Sender:''' [Default] Select this check box if you want Mail Anti-Virus to send a warning message to the sender of an infected attachment. Mail Anti-Virus sends this e-mail when it encounters a virus-infected attachment in an e-mail. The content of the e-mail that is sent is displayed in the preview box.+'''-->''' '''Attachment Removed Warning To Recipient:''' [Default] Select this check box if you want Anti-Spam to send a warning message to the recipient when it removes an infected attachment. The content of the e-mail that is sent is displayed in the preview box.
-'''-->''' '''Attachment Removed Warning To Recipient:''' [Default] Select this check box if you want Mail Anti-Virus to send a warning message to the recipient when it removes an infected attachment. The content of the e-mail that is sent is displayed in the preview box.+'''-->''' '''Virus Warning To Sender:''' [Default] Select this check box if you want Anti-Spam to send a virus warning message to the sender. The content of the e-mail that is sent is displayed in the preview box.
-'''-->''' '''Virus Warning To Sender:''' [Default] Select this check box if you want Mail Anti-Virus to send a virus-warning message to the sender. The content of the e-mail that is sent is displayed in the preview box.+'''-->''' '''Virus Warning To Recipient:''' [Default] Select this check box if you want Anti-Spam to send a virus warning message to the recipient. The content of the e-mail that is sent is displayed in the preview box.
-'''-->''' '''Virus Warning To Recipient:''' [Default] Select this check box if you want Mail Anti-Virus to send a virus-warning message to the recipient. The content of the e-mail that is sent is displayed in the preview box.+'''-->''' '''Content Warning To Sender:''' [Default] Select this check box if you want Anti-Spam to send a content warning message to the sender. The content of the e-mail that is sent is displayed in the preview box.
-'''-->''' '''Content Warning To Sender:''' [Default] Select this check box if you want Mail Anti-Virus to send a content warning message to the sender. The content of the e-mail that is sent is displayed in the preview box.+'''-->''' '''Content Warning To Recipient:''' [Default] Select this check box if you want Anti-Spam to send a content warning message to the recipient. The content of the e-mail that is sent is displayed in the preview box.
-'''-->''' '''Content Warning To Recipient:''' [Default] Select this check box if you want Mail Anti-Virus to send a content warning message to the recipient. The content of the e-mail that is sent is displayed in the preview box.+- '''Warning Mails:''' You can configure this setting if you want Anti-Spam to send warning e mails and alerts to a given sender or recipient. The default sender ('''From''' field) is '''postmaster''' and the default recipient ('''To''' field) is '''postmaster'''.
-- '''Warning Mails:''' You can configure this setting if you want Mail Anti Virus to send warning e mails and alerts to a given sender or recipient. The default sender ('''From''' field) is '''postmaster''' and the default recipient ('''To''' field) is postmaster.+- '''Delete Mails From User:''' You can configure eScan to automatically delete mails that have been sent by specific users. For this, you need to add the e mail addresses of such users to the '''Delete Mails From User''' list. By default, the '''Delete Mails From User''' section fields are unavailable, it is available only when you type in some text in the '''Delete Mails From User''' field and add mail addresses.
- +
-- '''Delete Mails From User:''' You can configure eScan to automatically delete mails that have been sent by specific users. For this, you need to add the mail addresses of such users to the '''Delete Mails From User''' list. By default, the '''Delete Mails From User''' section fields are unavailable, it is available only when you type in some text in the '''Delete Mails From User''' field and add mail addresses.+
- '''Reports''' - '''Reports'''
- 
This section displays the following information: This section displays the following information:
-'''-->''' '''Total Mails Scanned:''' It shows the total number of e-mails scanned by Mail Anti Virus on a real-time basis. +'''-->''' '''Total Quarantined Mails:''' It shows the total number of files scanned by the real-time Anti Spam monitor.
-'''-->''' '''Total Infected Objects:''' It shows the total number of infected objects found by Mail Anti Virus on a real-time basis.+'''-->''' '''Total Clear Mails:''' It shows the total number mails that are free from any virus or malware infection.
In addition, you can view the following reports: In addition, you can view the following reports:
-'''View Archived Mails:'''+'''View Quarantined Mails:'''
- +This button opens the '''View Quarantined Mails''' window, which displays the list of e-mails that have been quarantined by Anti-Spam. With the help of this window, you can configure the settings by specifying the path of the folder where you need to store the archived e-mails and specifying the format for storing e-mails. In addition, you can view the contents of e-mails, add sender’s e-mail id to the white list or add reserve content of the selected e-mail to the Hide E-Mail List.
-You can click this button to open the View Archived eMails window. (For more information on archived e-mail settings, refer '''Archived''' tab under '''Mail Anti-Virus Settings''' window.) +
-'''View Report:'''+&nbsp;
- +[[Image:Anti-spam Reports - Quarantine.jpg|center]]
-You can click this button to open the '''Report for Mail Anti Virus''' window. This window displays the summary of infected e mails and the action taken by Mail Anti Virus on such e mails for a given range of dates in a tabular format when you click the '''Generate Report''' button.+&nbsp;
 + 
 + 
 +'''View Ham Mails:'''
 +This button opens the '''View Ham Mails''' window, which displays the report of all ham e mails identified by eScan and have been archived by Mail Anti-Virus. As in the case of quarantined mails, you can specify the path of the folder where you need to store the archived e-mails and can also specify the format for storing e-mails.
 + 
 + 
 +&nbsp;
 +[[Image:Anti-spam Reports - HAM mails.jpg|center]]
 +&nbsp;
 + 
 + 
 +'''View Report:'''
 + 
 +This button displays the '''Report for the Anti Spam''' window. This window displays report for the Anti-Spam module for a given range of dates in a tabular format when you click the '''Generate Report''' button.
 + 
 + 
 +&nbsp;
 +[[Image:Anti-spam Reports - reports.jpg|center]]
 +&nbsp;

Current revision

eScan Version 14 Online Help

Back

Anti-Spam

This section provides the decription and settings of eScan's Anti-Spam for scanning of spam / junk emails.


Contents


Description

Anti-Spam is the third module of the eScan for ISS. This module filters all your junk and spam e mails by using the NILP technology and sends content warnings to specified recipients.

 

 

This page provides you with options required to configure the module. You can configure the settings from the following 2 sections:

Configuration

This section displays the following information.

- Anti-Spam Status : It displays the status of whether Anti-Spam module is started or stopped.

- Mail Phishing Filter : It displays the status of Mail phishing filter.

- Action : It displays the type of action taken by Anti-Spam module.


Start/Stop: Click an appropriate option to enable or disable Anti Spam module.


Settings: When you click this button, the Anti-Spam Settings window appears. On the Anti-Spam Settings window, you have two tabs – Advanced and Disclaimer, which are as follows:

Note: On below the screen of all the tabs contains four buttons — Default, OK, Cancel, and Apply, which you have to use after configuring the settings based on your requirement.
- Default: Click this button to apply the default settings.
- OK: Click this button after you click the Apply button to apply the configured settings.
- Cancel: Click this button to cancel the configured settings or to close the window.
- Apply: Click this button to apply the configured settings.


  • Advanced

This section provides you with options for configuring the general e mail options, spam filter configuration, and tagging e-mails in Anti Spam.

 

 

This tab helps you configure the following settings:

- Send Original Mail to User: [Default] This check box is selected by default. eScan creates Spam folder within the e mail client. When an e mail is tagged as Spam, it is moved to this folder. Select this check box, if you want to send original e mail that is tagged as spam to the recipient as well.

- Do not check content of Replied or Forwarded Mails: Select this check box, if you want to ensure that eScan does not check the contents of e mails that you have either replied or forwarded to other recipients.

- Check Content of Outgoing mails: Select this check box, if you want Anti-Spam to check outgoing e mails for restricted content.

--> Phrases: You can click the Phrases button to open the Phrases dialog box. This dialog box helps you configure additional e mail-related options. In addition, it allows you to specify a list of words that the user can either allow or block. This list is called the user specified whitelist. You can specify certain words or phrases, so that mails containing those words or phrases in the subject, header, or body are recognized as spam and are quarantined or deleted. All the fields are available only when you select the Enable E-mail Content Scanning check box. The dialog box uses the following color codes to categorize e-mails.

 >> User specified whitelist of words/phrases: (Color Code: GREEN) Click this option to list the words or phrases that are present in the whitelist. A phrase that is added to the whitelist cannot be edited, enabled, or disabled.

 >> User specified List of Blocked words/phrases: (Color Code: RED) Click this option to list the words or phrases that are defined in block list.

 >> User specified words/phrases disabled: (Color Code: GRAY) Click this option to list the words or phrases that are defined excluded during scans. The options in the Phrases to Check dialog box are disabled by default.


- Spam Filter Configuration: This section provides you with options for configuring the spam filter. All options in this section are selected by default.

--> Check for Mail Phishing: [Default] Select this check box, if you want Anti-Spam to check for fraudulent e-mails and quarantine them.

--> Treat Mails with Chinese /Korean character set as SPAM: [Default] When this check box is selected, eScan scans e mails with Chinese or Korean characters. This check is based on the research data conducted by MicroWorld’s various spam e mail samples collected from around the globe. From these samples, it was observed that spammers often use Chinese or Korean characters in their e mails.

--> Treat Subject with more than five whitespaces as SPAM: [Default] In its research, MicroWorld found that spam e-mails usually contain more than five consecutive white spaces. When this check box is selected, Anti Spam checks the spacing between characters or words in the subject line of e mails and treats e mails with more than five whitespaces in their subject lines as spam e mails.

--> Check content of HTML mails: [Default] Select this check box when you want Anti-Spam to scan e-mails in HTML format along with textual content.

--> Quarantine Advertisement mails: [Default] Select this check box when you want Anti-Spam to check for advertisement types of e-mails and quarantine them.

 >> Advanced: Click this button to open the Advanced Spam Filtering Options dialog box. This dialog box helps you configure the following advanced options for controlling spam.

 -->> Enable Non Intrusive Learning Pattern (NILP) check: [Default] NILP is MicroWorld’s revolutionary technology that uses Bayesian Filtering and works on the principles of Artificial Intelligence (AI) to analyze each e mail and prevents spam and phishing e mails from reaching your inbox. It has self-learning capabilities and it updates itself by using regular research feeds from MicroWorld servers. It uses an adaptive mechanism to analyze each e mail and categorize it as spam or ham based on the behavioral pattern of the user. Select this check box if you want to enable NILP check.

 -->> Enable eMail Header check: [Default] Select this check box if you want to check the validity of certain generic fields, such as From, To, and CC in an e mail and marks it as spam if any of the headers are invalid.

 -->> Enable X Spam Rules check: [Default] X Spam Rules are rules that describe certain characteristics of an e mail. It checks whether the words in the content of e mails are present in eScan’s database. This database contains a list of words and phrases, each of which is assigned a score or threshold. The X Spam Rules Check technology matches X Spam Rules with the mail header, body, and attachments of each e mail to generate a score. If the score crosses a threshold value, the mail is considered as spam. Anti Spam refers to this database to identify e mails and takes action on them.

 -->> Enable Sender Policy Framework (SPF) check: SPF is a world standard framework that is adopted by eScan to prevent hackers from forging sender addresses. It acts a powerful mechanism for controlling phishing mails. Select this check box if you want Anti-Spam to check the SPF record of the sender’s domain. However, your computer should be connected to the Internet for this option to work.

 -->> Enable Spam URI Realtime Blacklist (SURBL) check: Select this check box if you want Anti-Spam to check the URLs in the message body of an e-mail. If the URL is listed in the SURBL site, the e-mail will be blocked from being downloaded. However, your computer should be connected to the Internet for this option to work.

 -->> Enable Realtime Blackhole List (RBL) check: Select this check box if you want Anti-Spam to check the sender’s IP address in the RBL sites. If the sender IP address is blacklisted in the RBL site, the e-mail will be blocked from being downloaded. However, your computer should be connected to the Internet for this option to work.

 -->> RBL Servers: RBL is a DNS server that lists IP addresses of known spam senders. If the IP of the sender is found in any of the blacklisted categories, the connection is terminated. The RBL Servers list contains addresses of servers and sites that maintain information regarding spammers. You can add or delete address in the list as per your requirement.

 -->> Auto Spam Whitelist: Unlike normal RBLs, SURBL scans e mails for names or URLs of spam Web sites in the message body. It terminates the connection if the IP of the sender is found in any of the blacklisted categories. This contains a list of valid e-mail addresses that can bypass the above Spam filtering options. It thus allows e-mails from the whitelist to be downloaded to the recipient’s inbox. You can add or delete address in the list as per your requirement.


- Mail Tagging Options: Anti Spam also includes some mail tagging options, which are described as follows:

--> Do not change email at all: Click this option if you want to prevent Anti Spam from adding the [Spam] tag to e mails that have been identified as spam.

--> Both subject and body is changed: [Spam] tag is added in Subject: Actual spam content is embedded in Body: This option helps you identify spam e mails. When you select this option, Anti Spam adds a [Spam] tag in the subject line and the body of the e mail that has been identified as spam.

--> "X MailScan Spam: 1" header line is added: Actual spam content is embedded in Body: This option helps you add a [Spam] tag in the body of the e mail that has been identified as spam. In addition, it adds a line in the header line of the e mail.

--> Only [Spam] tag is added in Subject: Body is left unchanged: [Default] This option helps you add the [Spam] tag only in the subject of the e mail, which has been identified as spam.

--> "X MailScan Spam: 1" header line is added: Body and subject both remain unchanged: This option helps you add a header line to the e mail. However, it does not add any tag to the subject line or body of the e mail.


  • Disclaimer

The disclaimer is a footer or signature that is appended to all e-mails. The disclaimer can be added in the space provided.

 

 

The Disclaimer tab helps you configure the following settings.

- Add Disclaimer to Outgoing Mails: Select this check box if you want to add a disclaimer to all outgoing mails. This helps to make the recipient aware that the e mail is scanned and free of viruses.

- Add Disclaimer to Incoming Mails: Select this check box if you want to add a disclaimer to all incoming mails. Thus, you make the recipient aware that the e-mail is scanned and free of viruses. You can add a custom disclaimer by either typing the text of the disclaimer in the Disclaimer box or by selecting the file containing the disclaimer text by clicking Browse.

- Exclude Disclaimers in Mails to Following Receivers: By default, this section appears dimmed, it is available only when you select Add Disclaimer to Outgoing Mails check box. It enables you to restrict Anti Spam from appending the disclaimer to specific mail addresses or domains by adding them to a list.


Notification:

This button opens the Notification Settings dialog box. You can configure the notification settings for the Anti Spam module by using this dialog box. By configuring this module, you can send e mails to specific recipients when a particular event occurs.

 

 

The warning notification settings that you can configure on this screen are as follows:

- Virus Alerts

--> Show Alert Dialog-box: [Default] Select this check box if you want Anti-Spam to display an alert box notifying you of a virus infection.

--> Attachment Removed Warning To Sender: [Default] Select this check box if you want Anti Spam to send a warning message to the sender of an infected attachment. Anti Spam sends this e-mail when it encounters a virus-infected attachment in an e-mail. The content of the e-mail that is sent is displayed in the preview box.

--> Attachment Removed Warning To Recipient: [Default] Select this check box if you want Anti-Spam to send a warning message to the recipient when it removes an infected attachment. The content of the e-mail that is sent is displayed in the preview box.

--> Virus Warning To Sender: [Default] Select this check box if you want Anti-Spam to send a virus warning message to the sender. The content of the e-mail that is sent is displayed in the preview box.

--> Virus Warning To Recipient: [Default] Select this check box if you want Anti-Spam to send a virus warning message to the recipient. The content of the e-mail that is sent is displayed in the preview box.

--> Content Warning To Sender: [Default] Select this check box if you want Anti-Spam to send a content warning message to the sender. The content of the e-mail that is sent is displayed in the preview box.

--> Content Warning To Recipient: [Default] Select this check box if you want Anti-Spam to send a content warning message to the recipient. The content of the e-mail that is sent is displayed in the preview box.

- Warning Mails: You can configure this setting if you want Anti-Spam to send warning e mails and alerts to a given sender or recipient. The default sender (From field) is postmaster and the default recipient (To field) is postmaster.

- Delete Mails From User: You can configure eScan to automatically delete mails that have been sent by specific users. For this, you need to add the e mail addresses of such users to the Delete Mails From User list. By default, the Delete Mails From User section fields are unavailable, it is available only when you type in some text in the Delete Mails From User field and add mail addresses.


- Reports This section displays the following information:

--> Total Quarantined Mails: It shows the total number of files scanned by the real-time Anti Spam monitor.

--> Total Clear Mails: It shows the total number mails that are free from any virus or malware infection.

In addition, you can view the following reports:


View Quarantined Mails: This button opens the View Quarantined Mails window, which displays the list of e-mails that have been quarantined by Anti-Spam. With the help of this window, you can configure the settings by specifying the path of the folder where you need to store the archived e-mails and specifying the format for storing e-mails. In addition, you can view the contents of e-mails, add sender’s e-mail id to the white list or add reserve content of the selected e-mail to the Hide E-Mail List.


 

 


View Ham Mails: This button opens the View Ham Mails window, which displays the report of all ham e mails identified by eScan and have been archived by Mail Anti-Virus. As in the case of quarantined mails, you can specify the path of the folder where you need to store the archived e-mails and can also specify the format for storing e-mails.


 

 


View Report:

This button displays the Report for the Anti Spam window. This window displays report for the Anti-Spam module for a given range of dates in a tabular format when you click the Generate Report button.


 

 


eScan Copyright © 2015 MicroWorld Technologies Inc.- AntiVirus & Content Security.       Send your feedback to solutions@escanav.com eScan Wiki

    Privacy policy  About eScan Wiki  Disclaimers   This page has been accessed 8,757 times.