Chapter 33 Anti-Spam

Use this screen to configure an anti-spam black list entry to identify spam e-mail. You can create entries based on specific subject text, or the sender’s or relay’s IP address or e-mail address. You can also create entries that check for particular header fields and values.

Figure 425 Anti-X > Anti-Spam > Black/White List > Black List (or White List) > Add

The following table describes the labels in this screen.

Table 180 Anti-X > Anti-Spam > Black/White List > Black List (or White List) > Add

LABEL

DESCRIPTION

Enable Rule

Select this to have the ZyWALL use this entry as part of the black or white list.

 

To actually use the entry, you must also turn on the use of the list in the

 

corresponding list screen, enable the anti-spam feature in the anti-spam general

 

screen, and configure an anti-spam policy to use the list.

 

 

Type

Use this field to base the entry on the e-mail’s subject, source or relay IP address,

 

source e-mail address, or header.

 

Select Subject to have the ZyWALL check e-mail for specific content in the subject

 

line.

 

Select IP Address to have the ZyWALL check e-mail for a specific source or relay

 

IP address.

 

Select E-Mail Address to have the ZyWALL check e-mail for a specific source e-

 

mail address or domain name.

 

Select Mail Header to have the ZyWALL check e-mail for specific header fields

 

and values. Configure black list header entries to check for e-mail from bulk mail

 

programs or with content commonly used in spam. Configure white list header

 

entries to allow certain header values that identify the e-mail as being from a

 

trusted source.

 

 

Mail Subject

This field displays when you select the Subject type. Enter up to 63 ASCII

Keyword

characters of text to check for in e-mail headers. Spaces are not allowed, although

 

you could substitute a question mark (?). See Section 33.4.2 on page 567 for more

 

details.

 

 

Sender or Mail

This field displays when you select the IP type. Enter an IP address in dotted

Relay IP Address

decimal notation.

 

 

Netmask

This field displays when you select the IP type. Enter the subnet mask here, if

 

applicable.

 

 

Sender E-Mail

This field displays when you select the E-Mailtype. Enter a keyword (up to 63

Address

ASCII characters). See Section 33.4.2 on page 567 for more details.

 

 

Mail Header Field

This field displays when you select the Mail Header type.

Name

Type the name part of an e-mail header (the part that comes before the colon).

 

Use up to 63 ASCII characters.

 

For example, if you want the entry to check the “Received:” header for a specific

 

mail server’s domain, enter “Received” here.

 

 

Field Value

This field displays when you select the Mail Header type.

Keyword

Type the value part of an e-mail header (the part that comes after the colon). Use

 

up to 63 ASCII characters.

 

For example, if you want the entry to check the “Received:” header for a specific

 

mail server’s domain, enter the mail server’s domain here.

 

See Section 33.4.2 on page 567 for more details.

 

 

566

 

ZyWALL USG 100/200 Series User’s Guide