Allowing relaying to specific domains | Surf Control 5.2.4 instruction

SYSTEM SETTINGS

Receive Settings

2

•Reject mail from senders when SPF softfails – When SPF checking finds that the senders domain does not match the published SPF policy and ends with a SoftFail, reject the mail.

•Reject mail from senders when there is an SPF error – When SPF checking finds that the senders domain has published an erroneous SPF record, reject the mail.

Note: These options appear when you select the Perform SPF checking against e-mail sender check box.

3Enter the domain name you want to relay into the domain field.

•Adding one domain e.g. mydomain.com will only accept messages from this domain.

•Adding the domain with an asterisk e.g. *mydomain.com will accept messages from this domain and any sub-domains.

4Click Add>>, the domain will be added to the list on the right. If you want to delete any domain from this list, select the domain then click <<Remove to delete it.

Allowing relaying to specific domains

You can configure E-mail Filter Appliance to only receive and relay messages that will be sent to specific domains. Messages sent to other domains will be rejected. You can add domains manually, or import lists of domains in a batch. These could be a list you have created and stored on the network or a list that you have previously exported from another appliance.

To manually add domains for relaying:

1Enter the domain into the ‘domain’ text field.

2Click Add. This will add the domain to the list. Click Remove to remove it.

3Click Submit.

Importing lists of domains. You can import a list of domains to the appliance. This list must be a text file with the following properties:

•The charset must be UTF-8 if the files contains Chinese or Japanese characters.

•Each line is a domain name with leading and trailing spaces trimmed.

•The domain name is case insensitive.

•When the file is scanned, an empty line is ignored.

•Lines starting with # or / are considered to be comments so are skipped.

•Invalid domains are ignored.

An example of this type of file would be:

sgyw.com

cddn.net

shkjm.com

shhongtu.com

#shshenyang.com

SurfControl RiskFilter - E-mail V5.2.4

Administrator’s Guide 31

Image 36

Surf Control 5.2.4 manual Allowing relaying to specific domains

Contents

SurfControl RiskFilter E-mail Contents Policy Manager Riskfilter System Management Console Appendix Chapter HOW Riskfilter Works Managing Your Messages with Riskfilter Connection ControlRelay Control Load Balancing with Riskfilter Mail Exchanger IP Address MX Preference Load balancing with RiskFilter Launching Surfcontrol Riskfilter Riskfilter System Management ConsoleHttps//hostnameoripaddress10000 Riskfilter Management Console Administrator Https//hostnameoripaddress/adminOpening the RiskFilter Management Console Before YOU Start System Settings System Settings TAB What can be Configured in the System Settings TAB?Terminology Used Configuration Select General Configuration from the System Settings tabGeneral Postmaster e-mail address Other Settings Admin ConsoleSession Timeout Smtp greeting User Directories Editing User Directories Deleting a User Directory Open the User Directories screen Microsoft Active Directory Click Add in the User Directories screen IBM Ldap server Select IBM Ldap Server Generic Ldap Click Add in the User Directories screen Select Generic Ldap Validation settings Esmtp Server Information Recipient File Local Database To add a local database Click Add Select General Secure Proxy from the System Settings tab Secure ProxyLocal Database Add/Edit Address screen is displayed Select Enable POP3 Proxy Select Enable Webmail ProxySelect Enable Imap Proxy Setting up the storage directories Select General Directories from the System Settings tabLogs and Archives Certificate Notifications Select General Certificate from the System Settings tab Importing CertificatesExporting Certificates Certificate Signing Request Receive Settings Connection SettingsConnection Control Smtp Greeting Delay Allow Access List Directory Attack Control 16 The Directory Attack Control screen SPF Authentication Configuration Relay ControlControlling relaying of messages Allowing relaying to specific domains Relay for Internal Senders Recipient Validation Adding details of domainsAdd validation servers Message Control 19 The Message Control screen Exception Control 20 Set what action is taken on messages To configure exception control Black List Adding an IP or subnet address to the blacklist Importing and exporting Lists Adding domain or e-mail addresses to the blacklist White List Adding an IP or subnet address to the White ListDynamic White List Receive Settings Send Settings Setting up the destination domainsDOMAIN-BASED Delivery Delivering the messages Using TLS authentication Transport Layer Security Select Forward mail to the following Smtp servers Traffic Control Advanced Delivery Send Settings User Management Account Manager Changing the Administrator Account Password Specifying Administrator Access Setting up Administrator Access Editing Administrator Accounts Personal E-MAIL ManagerSelect Account Manager from the User Management menu Setting up the PEM message 31 What the user sees Personal E-mail Manager Adding users Exporting lists of usersImporting lists of users End-user Bypass Anti-Spam Setting Setting up End User ControlEND-USER Control User List User Authentication Authenticating PEM users Authenticating remote users License & Updates Update NOW Updating your Anti-Spam Agent Definitions AVA and ASA License Expired Scheduled Update Select the Anti-Virus Agent Update check boxUpdating the Anti-Virus Agent Select the Anti-Spam Agent Update check box License StatusUpdating the Anti-Spam Agent Updating Component Licenses Update Server Manually setting up a license serverViewing component licenses License Server User Number Exceeded Admin Guide Contact Support Select Help Contact Support from the System Settings tabHelp Submitting a Support Request Firstboot Wizard Configuration Wizard KEY Points Key Points Policy Manager What can be Configured in the Policy Manager TAB? Policy Manager TAB Creating a Policy Defining UsersDefining the Action Defining the Rules Global Policy Filter List Address Group Importing and Exporting Lists Deleting Address Groups Queue Manager Adding Queues Editing a Queue Select Queue Manager from the Policy Manager tab Dictionary Manager Surfcontrol DictionariesEditing SurfControl Dictionary properties Changing the value of words in the SurfControl Dictionaries Adding words to the SurfControl DictionariesDeleting a word or phrase Custom Dictionaries Create a new dictionary Importing Dictionaries Importing a SurfControl Dictionary Pack Creating a unicode text file Worthlesstab space15 balancetab space10 Importing a unicode text file Exporting a dictionarySelect Import from a Unicode text file Global Policy Creating a NEW SUB-POLICY Select Global Policy from the Policy Manager tab 15 Enter the details of the new Sub-policy Editing a SUB-POLICY Deleting a SUB-POLICYAdding Filters to the Policy Defining a Filter 18 The Global Policy Filter List screen ANTI-VIRUS Agent Filter Creating a new filterEditing the Anti-Virus Agent Filter Select Global Policy Filters from the Policy Manager tab Global Policy ANTI-SPAM Agent Filters Select Anti-Spam Agent DFP Configuring the Anti-Spam Agent Heuristics Filter Select Anti-Spam Agent Heuristics Configuring the Anti-Spam Agent LexiRules Filter Select Anti-Spam Agent LexiRules Internet Threat Database Filter 23 The Internet Threat Database Filter screen Standard Disclaimer Editing the Internet Threat Database FilterSelect the Internet Threat Database Filter and click Next Editing the Standard Disclaimer Filter Select the Standard Disclaimer Filter General Content Filter Editing the General Content FilterSelect the General Content Filter and click Next Advanced Content Filter Editing the Advanced Content FilterSelect the Advanced Content Filter and click Next Using the Expression List 27 The Expression screen Using Logical Operators Examples showing the use of Operands RiskFilter and Gateway and InnovationRiskFilter or Gateway or Innovation Occur gateway Assume Frequency =2 Message Attachment Filter 28 Message Attachment Filter screen Editing the Message Attachment Filter Select the Message Attachment Filter and click Next Content Guardian Creating a new Content Guardian filterSelect the Internet Content Guardian Filter and click Next Adding a filtering rule Dictionary Threshold Filter Deleting a filtering ruleHow the Dictionary Threshold Filter works Configuring the Dictionary Threshold Filter Select the Dictionary Threshold Filter and click Next Global Policy KEY Points Key Points Reports & Logs What can be Configured in the Reports and Logs TAB? Reports and Logs TAB Dashboard Server status monitoring Master Report Querying the Master ReportSelect Master Report from the Reports and Logs tab Select Specified date range from the Logs for list box Master Report Message Report Querying the Message Report Policy Report Querying the Policy Report Virus Report Querying the Virus Report Spam Report Querying the Spam Report Connection Report Querying the Connection Report Connection Report System Report Isolated Messages Managing Isolated MessagesSelect Isolated Messages from the Reports and Logs tab Click View Messages Isolated Messages Virus Messages Managing the Virus MessagesSelect Virus Messages from the Reports and Logs tab 14 An Archived message Spam Messages Managing Spam MessagesSelect Spam Messages from the Reports and Logs tab To view a message click the subject Archived Messages Managing Archived MessagesSelect Archived Messages from the Reports and Logs tab Export Messages Reprocess Messages View MessagesClick Reprocess Messages 19 Select the check box alongside the message Deferred Messages Querying Deferred MessagesSelect Deferred Messages from the Reports and Logs tab 22 An Archived message KEY Points Key Points RiskFilter System Management Console What can be Configured with the System Management CONSOLE? Overview Accessing the Riskfilter System Management Console Rfmngr Account What can be Configured in the Webmin TAB? Webmin TAB Webmin Configuration IP access controlSelect Webmin Configuration from the Webmin tab Webmin Actions LOG Select Language from the Webmin Configuration screen Select Logging from the Webmin Configuration screenLanguage Ports and Addresses Webmin Servers Index Proxy ServersAdding Webmin Servers Select Webmin Servers Index in the Webmin What can be Configured in the System TAB? System TAB Bootup and Shutdown Change PasswordsSelect Change Passwords in the System tab Historic System Statistics Multi Gateway Policy Routing Select Multi Gateway Policy Routing in the System tab Network Configuration Network Interfaces Multi-NIC configuration in RiskFilter Setting up additional NICsEnter an IP Address 11 The Create Bootup Interface screen Routing and Gateways Select DNS Client from the Network Configuration tab DNS Client Host Addresses 15 Host Addresses Running Processes System TimeSelect System Time in the System tab System and Server Status Click Sync system time What can be Configured in the Riskfilter TAB? Riskfilter TAB Riskfilter Services Manager Riskfilter Backup Manager Riskfilter Cluster Wizard Click Complete Load balancing with RiskFilter 25Load balancing 26 RiskFilter in a cluster set up Riskfilter WEB Access Manager Select Web Access Manager in the RiskFilter tab Update Riskfilter E-MAIL 28 The Update RiskFilter-E-mail screen KEY Points Key Points Appendix Using the Command Line Interface # sudo /etc/init.d/smgd status Clean queues QTOOL.SH Using the Command Line Interface Using the Command Line Interface Using the Command Line Interface UNINSTALL.SH Example 6 uninstalling the RiskFilter software All items were successfully uninstalled Internet Threat Database Categories Internet Theat Database CategoriesCore / Liability Categories Productivity Categories Core / Liability Categories Productivity Categories Special Events Other Index Administrator’s Guide SurfControl RiskFilter E-mail SurfControl RiskFilter E-mail Administrator’s Guide OpenSSL Sun RPC Apache Software License, Version Expat XML Parser Toolkit SPFJava Ldap