Escan/english/escan11/eScan Management Console/Policies/Features Help/Anti-Spam

From eScan Wiki

(Difference between revisions)

Current revision

· eScan · MailScan · Technologies

· Technical Info · Security Awareness · User Guides

[edit]

Anti-Spam

Anti-Spam module filters junk and spam emails and sends content warnings to specified recipients. Here you can configure the following settings.

Advanced

This section provides you with options for configuring the general email options, spam filter configuration, and tagging emails in Anti-Spam.

Send Original Mail to User [Default]
This check box is selected by default. eScan delivers spam mail to your inbox with a spam tag. When an email is tagged as SPAM, it is moved to this folder. Select this check box, if you want to send original email tagged as spam to the recipient as well.

Do not check content of Replied or Forwarded Mails
Select this check box, if you want to ensure that eScan does not check the contents of emails that you have either replied or forwarded to other recipients.

Check Content of Outgoing mails
Select this check box, if you want Anti-Spam to check outgoing emails for restricted content.

Phrases

Click Phrases to open the Phrases dialog box.
This dialog box lets you configure additional email related options. In addition, it lets you specify a list of words that the user can either allow or block.

User specified whitelist of words/phrases (Color Code: GREEN)
This option indicates the list of words or phrases that are present in the whitelist. A phrase added to the whitelist cannot be edited, enabled, or disabled.

User specified List of Blocked words/phrases: (Color Code: RED)
This option indicates the list of words or phrases that are defined in block list.

User specified words/phrases disabled: (Color Code: GRAY)
This option indicates the list of words or phrases that are defined to be excluded during scans. The options in the Phrases to Check dialog box are disabled by default.

Action List

Add Phrase: Option to add phrase to quarantine or delete the mail.
Edit Phrase: To modify existing phrase added in list.
Enable Phrase: By default, it is enabled. After being disabled, you can use this option to enable it.
Disable Phrase: Disable existing phrase added in list.
Whitelist: This will allow email to deliver to inbox when phrase is found in the email.
Block list: This will delete email when it contains the phrase.
Delete: Delete the phrase added in list.

Spam Filter Configuration

This section provides you with options for configuring the spam filter. All options in this section are selected by default.

Check for Mail Phishing [Default]
Select this option if you want Anti-Spam to check for fraudulent emails and quarantine them.

Treat Mails with Chinese/Korean character set as SPAM [Default]
When this option is selected, emails are scanned for Chinese or Korean characters. This check is based on the research data conducted by MicroWorld's various spam email samples collected from around the globe. From these samples, it was observed that spammers often use Chinese or Korean characters in their emails.

Treat Subject with more than 5 whitespaces as SPAM [Default]
In its research, MicroWorld found that spam emails usually contain more than five consecutive white spaces. When this option is selected, Anti-Spam checks the spacing between characters or words in the subject line of emails and treats emails with more than five whitespaces in their subject lines as spam emails.

Check content of HTML mails [Default]
Select this option if you want Anti-Spam to scan emails in HTML format along with text content.

Quarantine Advertisement mails [Default]
Select this option if you want Anti-Spam to check for advertisement types of emails and quarantine them.

Advanced

Clicking Advanced displays Advanced Spam Filtering Options dialog box. This dialog box lets you configure the following advanced options for controlling spam.

Enable Non-Intrusive Learning Pattern (NILP) check [Default]
Non-Learning Intrusive Pattern (NILP) is MicroWorld's revolutionary technology that uses Bayesian Filtering and works on the principles of Artificial Intelligence (AI) to analyze each email and prevents spam and phishing emails from reaching your inbox. It has self-learning capabilities and it updates itself by using regular research feeds from MicroWorld servers. It uses an adaptive mechanism to analyze each email and categorize it as spam or ham based on the behavioral pattern of the user.

Enable email Header check [Default]
Select this option if you want to check the validity of certain generic fields likes From, To, and CC in an email and marks it as spam if any of the headers are invalid.

Enable X Spam Rules check [Default]
X Spam Rules are rules that describe certain characteristics of an email. It checks whether the words in the content of emails are present in eScan's database. This database contains a list of words and phrases, each of which is assigned a score or threshold. The Spam Rules Check technology matches X Spam Rules with the mail header, body, and attachments of each email to generate a score. If the score crosses a threshold value, the mail is considered as spam. Anti-Spam refers to this database to identify emails and takes action on them.

Enable Sender Policy Framework (SPF) check
SPF is a world standard framework adopted by eScan to prevent hackers from forging sender addresses. It acts as a powerful mechanism for controlling phishing mails. Select this check box if you want Anti-Spam to check the SPF record of the sender's domain. However, your computer should be connected to the Internet for this option to work.

Enable Spam URI Real-time Blacklist (SURBL) check
Select this option if you want Anti-Spam to check the URLs in the message body of an email. If the URL is listed in the SURBL site, the email will be blocked from being downloaded. However, your computer should be connected to the Internet for this option to work.

Enable Real-time Blackhole List (RBL) check
Select this option if you want Anti-Spam to check the sender's IP address in the RBL sites. If the sender IP address is blacklisted in the RBL site, the email will be blocked from being downloaded. However, your computer should be connected to the Internet for this option to work.

RBL Servers
RBL is a DNS server that lists IP addresses of known spam senders. If the IP of the sender is found in any of the blacklisted categories, the connection is terminated. The RBL Servers list contains addresses of servers and sites that maintain information regarding spammers. You can add or delete address in the list as per your requirement.

Auto Spam Whitelist
Unlike normal RBLs, SURBL scans emails for names or URLs of spam websites in the message body. It terminates the connection if the IP of the sender is found in any of the blacklisted categories. This contains a list of valid email addresses that can bypass the above Spam filtering options. It thus allows emails from the whitelist to be downloaded to the recipient's inbox. You can add or delete address in the list as per your requirement.

Mail Tagging Options

Anti-Spam also includes some mail tagging options, which are described as follows:

Do not change email at all
Select this option if you want to prevent Anti-Spam from adding the [Spam] tag to emails that have been identified as spam.

Both subject and body are changed: [Spam] tag is added in Subject: Actual spam content is embedded in Body
This option lets you identify spam emails. When you select this option, Anti-Spam adds a [Spam] tag in the subject line and the body of the email that has been identified as spam.

"X MailScan Spam: 1" header line is added: Actual spam content is embedded in Body
This option lets you add a [Spam] tag in the body of the email that has been identified as spam. In addition, it adds a line in the header line of the email.

Only [Spam] tag is added in Subject: Body is left unchanged [Default]
This option lets you add the [Spam] tag only in the subject of the email, which has been identified as spam.

"X MailScan Spam: 1" header line is added: Body and subject both remain unchanged
This option lets you add a header line to the email. However, it does not add any tag to the subject line or body of the email.

Retrieved from "https://wiki.escanav.com/wiki/index.php/Escan/english/escan11/eScan_Management_Console/Policies/Features_Help/Anti-Spam"

-'''Anti-Spam'''
+{| class="wikitable" border="0"
-Anti-Spam is a part of eScan\’s Protection feature. This module filters all your junk and spam e mails by using the NILP technology and sends content warnings to specified recipients.
+|-
-This page provides you with options for configuring the module. You can configure the following settings.
+{| id="mp-topbanner" style="width:100%; background:#fcfcfc; margin-top:1.2em; border:1px solid #ccc;"
-* '''Start/Stop:''' It enables you to enable or disable '''Anti Spam''' module. Click the appropriate option.
+| style="width:10%; color:#000;" |
+{| style="width:100px; border:none; background:none;"
+| [[Image:escan-g.jpg]]
+|}
+|style="text-align:left;"|'''·''' [[Escan/english/FAQ-eScan|<font size=1.5 color="blue" align="left">eScan</font>]]&nbsp;&nbsp;'''·''' [[Escan/english/MailScan-AFT|<font size=1.5 color="blue">MailScan</font>]]&nbsp;&nbsp;'''·''' [[Escan/english/Technologies|<font size=1.5 color="blue">Technologies</font>]]
+|style="text-align:right;"|&nbsp;&nbsp;'''·''' [[Technical Info|<font size=1.5 color="blue">Technical Info</font>]]&nbsp;&nbsp;'''·''' [[Escan/english/Security_Awareness|<font size=1.5 color="blue">Security Awareness</font>]]&nbsp;&nbsp;'''·''' [[User_Guides|<font size=1.5 color="blue">User Guides</font>]]
+|}
+<h2 style='color:#556B2F;font-size:24.0pt;font-family:"Open Sans"'>Anti-Spam</h2>
-''Advanced ''
+<p style='font-size:11.0pt;font-family:"Open Sans"'>Anti-Spam module filters junk and spam emails and sends content warnings to specified recipients. Here you can configure the following settings. </p>
-This section provides you with options for configuring the general e mail options, spam filter configuration, and tagging e-mails in Anti Spam.
-* '''Send Original Mail to User: \[Default\] '''This check box is selected by default. eScan creates Spam folder within the e mail client. When an e mail is tagged as SPAM, it is moved to this folder. You should select this check box, if you need to send original e mail that is tagged as spam to the recipient as well.
-* '''Do not check content of Replied or Forwarded Mails: '''You can select this check box, if you need to ensure that eScan does not check the contents of e mails that you have either replied or forwarded to other recipients.
-* '''Check Content of Outgoing mails: '''You can select this check box, if you need Anti-Spam to check outgoing e mails for restricted content.
-** '''Phrases: '''You can click the '''Phrases''' button to open the '''Phrases''' dialog box. This dialog box helps you configure additional e mail-related options. In addition, it allows you to specify a list of words that the user can either allow or block. This list is called the '''user specified whitelist'''. You can specify certain words or phrases so that mails containing those words or phrases in the subject, header, or body are recognized as spam and are quarantined or deleted. All the fields are available only when you select the '''Enable E-mail Content Scanning''' check box. The dialog box uses the following color codes to categorize e-mails.
-* '''User specified whitelist of words/phrases:''' (Color Code: '''GREEN''') You should click this option to list the words or phrases that are present in the whitelist. A phrase that is added to the whitelist cannot be edited, enabled, or disabled.
+<p style='color:#32CD32;font-size:16.0pt;font-family:"Open Sans"'>Advanced</p>
-* '''User specified List of Blocked words/phrases:''' (Color Code: '''RED''') You should click this option to list the words or phrases that are defined in block list.
-* '''User specified words/phrases disabled: '''(Color Code: '''GRAY''') You should click this option to list the words or phrases that are defined excluded during scans. The options in the '''Phrases to Check''' dialog box are disabled by default.
-* '''Spam Filter Configuration: '''This section provides you with options for configuring the spam filter.''' '''All options in this section are selected by default.
+<p style='font-size:11.0pt;font-family:"Open Sans"'>This section provides you with options for configuring the general email options, spam filter configuration, and tagging emails in Anti-Spam.<br><br>
-** '''Check for Mail Phishing: \[Default\] '''You should select this check box, if you need Anti-Spam to check for fraudulent e-mails and quarantine them.
+<b>Send Original Mail to User [Default]</b><br>
-** '''Treat Mails with Chinese /Korean character set as SPAM: \[Default\] '''When this''' '''check box is selected, eScan scans e mails with Chinese or Korean characters. This check is based on the research data conducted by MicroWorld\’s various spam e mail samples collected from around the globe. From these samples, it was observed that spammers often use Chinese or Korean characters in their e mails.
+This check box is selected by default. eScan delivers spam mail to your inbox with a spam tag. When an email is tagged as SPAM, it is moved to this folder. Select this check box, if you want to send original email tagged as spam to the recipient as well.<br><br>
-** '''Treat Subject with more than 5 whitespaces as SPAM: \[Default\] '''In its research, MicroWorld found that spam e-mails usually contain more than five consecutive white spaces. When this check box is selected, Anti Spam checks the spacing between characters or words in the subject line of e mails and treats e mails with more than five whitespaces in their subject lines as spam e mails.
-** '''Check content of HTML mails: \[Default\] '''You should select this check box when you need Anti-Spam to scan e-mails in HTML format along with textual content.
-** '''Quarantine Advertisement mails: \[Default\] '''You should select this check box when you need Anti-Spam to check for advertisement types of e-mails and quarantine them.
-*** '''Advanced: '''Click this button to open the '''Advanced Spam Filtering Options''' dialog box. This dialog box helps you configure the following advanced options for controlling spam.
-**** '''Enable Non Intrusive Learning Pattern (NILP) check: \[Default\] '''NILP is MicroWorld\’s revolutionary technology that uses Bayesian Filtering and works on the principles of Artificial Intelligence (AI) to analyze each e mail and prevents spam and phishing e mails from reaching your inbox. It has self-learning capabilities and it updates itself by using regular research feeds from MicroWorld servers. It uses an adaptive mechanism to analyze each e mail and categorize it as spam or ham based on the behavioral pattern of the user. You should select this check box if you need to enable NILP check.
-**** '''Enable eMail Header check: \[Default\] '''You should select this check box if you need to check the validity of certain generic fields like From, To, and CC in an e mail and marks it as spam if any of the headers are invalid.
-**** '''Enable X Spam Rules check: \[Default\] '''X Spam Rules are rules that describe certain characteristics of an e mail. It checks whether the words in the content of e mails are present in eScan\’s database. This database contains a list of words and phrases, each of which is assigned a score or threshold. The''' '''X Spam Rules Check technology matches X Spam Rules with the mail header, body, and attachments of each e mail to generate a score. If the score crosses a threshold value, the mail is considered as spam.''' '''Anti Spam refers to this database to identify e mails and takes action on them.''' '''
-**** '''Enable Sender Policy Framework (SPF) check: '''SPF is a world standard framework that is adopted by eScan to prevent hackers from forging sender addresses. It acts a powerful mechanism for controlling phishing mails. You should select this check box if you need Anti-Spam to check the SPF record of the sender\’s domain. However, your computer should be connected to the Internet for this option to work.
-**** '''Enable Spam URI Realtime Blacklist (SURBL) check: '''You should select this option if you need Anti-Spam to check the URLs in the message body of an e-mail. If the URL is listed in the SURBL site, the e-mail will be blocked from being downloaded. However, your computer should be connected to the Internet for this option to work.
-**** '''Enable Realtime Blackhole List (RBL) check: '''You should select this option if you need Anti-Spam to check the sender\’s IP address in the RBL sites. If the sender IP address is blacklisted in the RBL site, the e-mail will be blocked from being downloaded. However, your computer should be connected to the Internet for this option to work.
-**** '''RBL Servers: '''RBL is a DNS server that lists IP addresses of known spam senders. If the IP of the sender is found in any of the blacklisted categories, the connection is terminated. The RBL Servers list contains addresses of servers and sites that maintain information regarding spammers. You can add or delete address in the list as per your requirement.
-**** '''Auto Spam Whitelist: '''Unlike normal RBLs, SURBL scans e mails for names or URLs of spam Web sites in the message body. It terminates the connection if the IP of the sender is found in any of the blacklisted categories. This contains a list of valid e-mail addresses that can bypass the above Spam filtering options. It thus allows e-mails from the whitelist to be downloaded to the recipient\’s inbox. You can add or delete address in the list as per your requirement.
-* '''Mail Tagging Options: '''Anti Spam also includes some mail tagging options, which are described as follows:
+<b>Do not check content of Replied or Forwarded Mails</b><br>
+Select this check box, if you want to ensure that eScan does not check the contents of emails that you have either replied or forwarded to other recipients.<br><br>
+<b>Check Content of Outgoing mails</b><br>
+Select this check box, if you want Anti-Spam to check outgoing emails for restricted content.</p>
-** '''Do not change email at all: '''You should select this option when you need to prevent Anti Spam from adding the \[Spam\] tag to e mails that have been identified as spam.
+<p style='color:#32CD32;font-size:12.0pt;font-family:"Open Sans"'><b>Phrases</b></p>
-** '''Both subject and body is changed: \[Spam\] tag is added in Subject: Actual spam content is embedded in Body: '''This option helps you identify spam e mails. When you select this option, Anti Spam''' '''adds a \[Spam\] tag in the subject line and the body of the e mail that has been identified as spam.
-** '''"X MailScan Spam: 1" header line is added: Actual spam content is embedded in Body: '''This option helps you add a \[Spam\] tag in the body of the e mail that has been identified as spam. In addition, it adds a line in the header line of the e mail.
+<p style='font-size:11.0pt;font-family:"Open Sans"'>Click <b>Phrases</b> to open the <b>Phrases</b> dialog box. <br> This dialog box lets you configure additional email related options. In addition, it lets you specify a list of words that the user can either allow or block.<br><br>
-** '''Only \[Spam\] tag is added in Subject: Body is left unchanged: \[Default\] '''This option helps you add the \[Spam\] tag only in the subject of the e mail, which has been identified as spam.
+<b>User specified whitelist of words/phrases</b> (Color Code: <b>GREEN</b>)<br>
-** '''"X MailScan Spam: 1" header line is added: Body and subject both remain unchanged: '''This option helps you add a header line to the e mail. However, it does not add any tag to the subject line or body of the e mail.
+This option indicates the list of words or phrases that are present in the whitelist. A phrase added to the whitelist cannot be edited, enabled, or disabled.<br><br>
+<b>User specified List of Blocked words/phrases:</b> (Color Code: <b>RED</b>)<br>
+This option indicates the list of words or phrases that are defined in block list.<br><br>
+<b>User specified words/phrases disabled: </b>(Color Code: <b>GRAY</b>)<br>
+This option indicates the list of words or phrases that are defined to be excluded during scans. The options in the <b>Phrases to Check</b> dialog box are disabled by default.<br> <br>
+<b>Action List</b></p>
+<ul >
+ <li style='font-size:11.0pt;font-family:"Open Sans"'><b>Add Phrase</b>: Option to add phrase to quarantine or delete the mail.</li>
+ <li style='font-size:11.0pt;font-family:"Open Sans"'><b>Edit Phrase</b>: To modify existing phrase added in list.</li>
+ <li style='font-size:11.0pt;font-family:"Open Sans"'><b>Enable Phrase</b>: By default, it is enabled. After being disabled, you can use this option to enable it.</li>
+ <li style='font-size:11.0pt;font-family:"Open Sans"'><b>Disable Phrase</b>: Disable existing phrase added in list.</li>
+ <li style='font-size:11.0pt;font-family:"Open Sans"'><b>Whitelist</b>: This will allow email to deliver to inbox when phrase is found in the email.</li>
+ <li style='font-size:11.0pt;font-family:"Open Sans"'><b>Block list</b>: This will delete email when it
+     contains the phrase.</li>
+ <li style='font-size:11.0pt;font-family:"Open Sans"'><b>Delete</b>: Delete the phrase added in list.</li>
+</ul>
+<br>
+<p style='color:#32CD32;font-size:12.0pt;font-family:"Open Sans"'><b>Spam Filter Configuration</b></p>
+<p style='font-size:11.0pt;font-family:"Open Sans"'>This section provides you with options for configuring the spam filter. All options in this section are selected by default.<br><br>
+<b>Check for Mail Phishing [Default]</b><br>
+Select this option if you want Anti-Spam to check for fraudulent emails and quarantine them.<br><br>
+<b>Treat Mails with Chinese/Korean character set as SPAM [Default]</b><br>
+When this option is selected, emails are scanned for Chinese or Korean characters. This check is based on the research data conducted by MicroWorld's various spam email samples collected from around the globe. From these samples, it was observed that spammers often use Chinese or Korean characters in their emails.<br><br>
+<b>Treat Subject with more than 5 whitespaces as SPAM [Default]</b><br>
+In its research, MicroWorld found that spam emails usually contain more than five consecutive white spaces. When this option is selected, Anti-Spam checks the spacing between characters or words in the subject line of emails and treats emails with more than five whitespaces in their subject lines as spam emails.<br><br>
+<b>Check content of HTML mails [Default]</b><br>
+Select this option if you want Anti-Spam to scan emails in HTML format along with text content.<br><br>
+<b>Quarantine Advertisement mails [Default]</b><br>
+Select this option if you want Anti-Spam to check for advertisement types of emails and quarantine them.</p>
+<p style='color:#32CD32;font-size:12.0pt;font-family:"Open Sans"'><b>Advanced</b></p>
+<p style='font-size:11.0pt;font-family:"Open Sans"'>Clicking <b>Advanced</b> displays Advanced Spam Filtering Options dialog box. This dialog box lets you configure the following advanced options for controlling spam.<br><br>
+<b>Enable Non-Intrusive Learning Pattern (NILP) check [Default]</b><br>
+Non-Learning Intrusive Pattern (NILP) is MicroWorld's revolutionary technology that uses Bayesian Filtering and works on the principles of Artificial Intelligence (AI) to analyze each email and prevents spam and phishing emails from reaching your inbox. It has self-learning capabilities and it updates itself by using regular research feeds from MicroWorld servers. It uses an adaptive mechanism to analyze each email and categorize it as spam or ham based on the behavioral pattern of the user.<br><br>
+<b>Enable email Header check [Default]</b><br>
+Select this option if you want to check the validity of certain generic fields likes From, To, and CC in an email and marks it as spam if any of the headers are invalid.<br><br>
+<b>Enable X Spam Rules check [Default]</b><br>
+X Spam Rules are rules that describe certain characteristics of an email. It checks whether the words in the content of emails are present in eScan's database. This database contains a list of words and phrases, each of which is assigned a score or threshold. The Spam Rules Check technology matches X Spam Rules with the mail header, body, and attachments of each email to generate a score. If the score crosses a threshold value, the mail is considered as spam. Anti-Spam refers to this database to identify emails and takes action on them.<br><br>
+<b>Enable Sender Policy Framework (SPF) check</b><br>
+SPF is a world standard framework adopted by eScan to prevent hackers from forging sender addresses. It acts as a powerful mechanism for controlling phishing mails. Select this check box if you want Anti-Spam to check the SPF record of the sender's domain. However, your computer should be connected to the Internet for this option to work.<br><br>
+<b>Enable Spam URI Real-time Blacklist (SURBL) check</b><br>
+Select this option if you want Anti-Spam to check the URLs in the message body of an email. If the URL is listed in the SURBL site, the email will be blocked from being downloaded. However, your computer should be connected to the Internet for this option to work.<br><br>
+<b>Enable Real-time Blackhole List (RBL) check</b><br>
+Select this option if you want Anti-Spam to check the sender's IP address in the RBL sites. If the sender IP address is blacklisted in the RBL site, the email will be blocked from being downloaded. However, your computer should be connected to the Internet for this option to work.<br><br>
+<b>RBL Servers</b><br>
+RBL is a DNS server that lists IP addresses of known spam senders. If the IP of the sender is found in any of the blacklisted categories, the connection is terminated. The RBL Servers list contains addresses of servers and sites that maintain information regarding spammers. You can add or delete address in the list as per your requirement.<br><br>
+<b>Auto Spam Whitelist</b><br>
+Unlike normal RBLs, SURBL scans emails for names or URLs of spam websites in the message body. It terminates the connection if the IP of the sender is found in any of the blacklisted categories. This contains a list of valid email addresses that can bypass the above Spam filtering options. It thus allows emails from the whitelist to be downloaded to the recipient's inbox. You can add or delete address in the list as per your requirement.</p>
+<p style='color:#32CD32;font-size:12.0pt;font-family:"Open Sans"'><b>Mail Tagging Options</b></p>
+<p style='font-size:11.0pt;font-family:"Open Sans"'>Anti-Spam also includes some mail tagging options, which are described as follows:<br><br>
+<b>Do not change email at all</b><br>
+Select this option if you want to prevent Anti-Spam from adding the [Spam] tag to emails that have been identified as spam.<br><br>
+<b>Both subject and body are changed: [Spam] tag is added in Subject: Actual spam content is
+embedded in Body</b><br>
+This option lets you identify spam emails. When you select this option, Anti-Spam adds a [Spam] tag in the subject line and the body of the email that has been identified as spam.<br><br>
+<b>&quot;X MailScan Spam: 1&quot; header line is added: Actual spam content is embedded in
+Body</b><br>
+This option lets you add a [Spam] tag in the body of the email that has been identified as spam. In addition, it adds a line in the header line of the email.<br><br>
+<b>Only [Spam] tag is added in Subject: Body is left unchanged [Default]</b><br>
+This option lets you add the [Spam] tag only in the subject of the email, which has been identified as spam.<br><br>
+<b>&quot;X MailScan Spam: 1&quot; header line is added: Body and subject both remain
+unchanged</b><br>
+This option lets you add a header line to the email. However, it does not add any tag to the subject line or body of the email.</p>

Welcome to eScan Wikipedia

From eScan Wiki

Current revision

Anti-Spam

Main Page

Latest Developments

Product Information

Knowledge Base

For Windows Downloads

For Linux Downloads

For MAC Downloads

General

Support

Views