Chapter 24 Anti-Spam

24.2.2.1 Zone to Zone Anti-spam Rule Example

This example shows how to configure (and display) a WAN to DMZ anti-spam rule to scan POP3 and SMTP traffic. SMTP spam is forwarded. POP3 spam is marked with a spam tag. The ZyWALL logs the event when an e-mail matches the DNSBL (see Section 24.2.4 on page 216 for more on DNSBL).

The white and black lists are ignored.

Router(config)# anti-spam rule 1 Router(config-as-rule-1)# activate Router(config-as-rule-1)# from-zone WAN Router(config-as-rule-1)# to-zone DMZ Router(config-as-rule-1)# scan smtp Router(config-as-rule-1)# scan pop3 Router(config-as-rule-1)# match-action smtp forward Router(config-as-rule-1)# match-action pop3 forward-with-tag Router(config-as-rule-1)# log Router(config-as-rule-1)# bypass white-list Router(config-as-rule-1)# bypass black-list Router(config-as-rule-1)# exit

Router(config)# show anti-spam rule 1 Anti-Spam Rule: 1

active: yes

log: log

from zone: WAN

to zone: DMZ scan protocols:

smtp: yes

pop3: yes

match action: smtp: forward

pop3: forward-with-tag bypass white list: yes bypass black list: yes bypass ip reputation: no bypass mail content: no bypass virus outbreak: no bypass dnsbl: no

24.2.3 White and Black Lists

The following table identifies values used in these commands. Other input values are discussed with the corresponding commands.

Table 119 Input Values for White and Black list Anti-Spam Commands

LABEL

DESCRIPTION

mail_header

The name part of an e-mail header (the part that comes before the colon). Use up

 

to 63 ASCII characters.

 

For example, if you want the entry to check the “Received:” header for a specific

 

mail server’s domain, use “Received”.

 

 

mail_header_value

The value part of an e-mail header (the part that comes after the colon). Use up to

 

63 ASCII characters.

 

For example, if you want the entry to check the “Received:” header for a specific

 

mail server’s domain, specify the mail server’s domain.

 

See Section 24.2.3.2 on page 216 for more details.

 

 

214

 

ZyWALL (ZLD) CLI Reference Guide