From eScan Wiki
Revision as of 07:09, 9 July 2021
Settings
When you click this button, the Anti-Spam Settings window appears. The following section explains the same in detail:
You can configure the following settings:
Right click to Add phrase/ Edit phrase
When you right-click on the table you will get a popup window. In the popup click on Add Phrase, Add Phrase dialogue box appears.
Phrase: You can add certain words or phrases, so that mails containing those words or phrases in the subject, header, or body part of an email are recognized as spam. Once you add the phrase you can edit the phrase along with the actions defined by you, which are as follows:
- Quarantine the Mail: This option is selected by default. Select this option to the quarantine the mail that contains the above phrase.
- Delete the Mail: Select this option to automatically delete the mail with the above phrase.
In addition, it allows you to specify a list of words that you can either allow or block. This list is called the whitelist. The dialog box uses the following color codes to categorize emails:
- User specified whitelist of words/phrases: (Color Code: GREEN) Click this option to select the starting row of Whitelisted words or phrases. A phrase that is added to the whitelist cannot be edited, enabled, or disabled.
- User specified List of Blocked words/phrases: (Color Code: RED) Click this option to select the starting row of the words or phrases that are defined in block list.
- User specified words/phrases disabled: (Color Code: GRAY) Click this option to select the starting row of words or phrases that are defined to be excluded during scans. The options in the Phrases to Check dialog box are disabled by default.
Default
Click this button to apply the default settings.
Advanced
This section provides you with options for configuring the general email options, spam filter configuration, and tagging emails in Anti‑Spam. By click Advanced button the Advanced Spam Filtering Options dialog box opens. This dialog box helps you configure the following advanced options for controlling spam.
- Enable Non Intrusive Learning Pattern (NILP) check: This option is selected by default. NILP is MicroWorld's revolutionary technology that uses Bayesian Filtering and works on the principles of Artificial Intelligence (AI) to analyze each email and prevents spam and phishing emails from reaching your inbox. It has self-learning capabilities and it updates itself by using regular research feeds from MicroWorld servers. It uses an adaptive mechanism to analyze each email and categorize it as spam or ham based on the behavioral pattern of the user. Select this check box if you want to enable NILP check.
- Enable eMail Header check : This option is selected by default. Select this check box if you want to check the validity of certain generic fields, such as From, To, and CC in an email and marks it as spam if any of the headers are invalid.
- Enable X‑Spam Rules check: This option is selected by default. X‑Spam Rules are rules that describe certain characteristics of an email. It checks whether the words in the content of emails are present in eScan's database. This database contains a list of words and phrases, each of which is assigned a score or threshold. The X‑Spam Rules Check technology matches X‑Spam Rules with the mail header, body, and attachments of each email to generate a score. If the score crosses a threshold value, the mail is considered as spam. Anti‑Spam refers to this database to identify emails and takes action on them.
- Enable Sender Policy Framework (SPF) check: SPF is a world‑standard framework that is adopted by eScan to prevent hackers from forging sender addresses. It acts a powerful mechanism for controlling phishing mails. Select this check box if you want Anti-Spam to check the SPF record of the sender's domain. However, your computer should be connected to the Internet for this option to work.
- Enable Spam URL Realtime Blacklist (SURBL) check: Select this check box if you want Anti-Spam to check the URLs in the message body of an email. If the URL is listed in the SURBL site, the email will be blocked from being downloaded. However, your computer should be connected to the Internet for this option to work.
- Enable Realtime Blackhole List (RBL) check: Select this check box if you want Anti-Spam to check the sender's IP address in the RBL sites. If the sender IP address is blacklisted in the RBL site, the email will be blocked from being downloaded. However, your computer should be connected to the Internet for this option to work.
- RBL Servers: RBL is a DNS server that lists IP addresses of known spam senders. If the IP of the sender is found in any of the blacklisted categories, the connection is terminated. The RBL Servers list contains addresses of servers and sites that maintain information regarding spammers. You can add or delete address in the list as per your requirement.
- Add: You can add servers and sites that contain information of spammers.
- Delete: You can delete a specific server or site from the list.
- Remove All: You can remove all the servers and sites from list all at once.
- Auto‑Spam Whitelist: Unlike normal RBLs, SURBL scans emails for names or URLs of spam Web sites in the message body. It terminates the connection if the IP of the sender is found in any of the blacklisted categories. This contains a list of valid email addresses that can bypass the above Spam filtering options. It thus allows emails from the whitelist to be downloaded to the recipient's inbox. You can add or delete address in the list as per your requirement.
- Add: You can add valid email addresses that can bypass the above spam filtering.
- Delete: You can delete the specific email address from the list.
- Remove All: You can remove all the email addresses from list all at once.
- Save: You can save the configuration by clicking on this button.
- Exit: You can exit the Advanced Spam Filtering Options without saving the configuration.
OK
Click this button after you click the Apply button to apply the configured settings.
Cancel
Click this button to cancel the configured settings or to close the window.