Quantcast
Channel: Sophos User Bulletin Board
Viewing all articles
Browse latest Browse all 14361

[8.960-9] POP3 proxy helpfile questions

$
0
0
Hi,

the online help for the pop3 proxy tells the following, see my questions/remarks in red.

With the following two options you can specify what to do with messages that have been assigned a certain spam score. This ensures that potential spam e-mails are treated differently by the gateway.

Spam Action: Here you can define what to do with messages that are classified as probable spam. Note that there may be false positives, such as newsletters, thus blackholing may lead to e-mail loss.


Blackholing isn't an action you can select (see below).

You can choose between different actions for those two types of spam:

Off: No messages will be marked as spam or filtered out.
Warn: No messages will be filtered out. Instead, a spam flag will be added to the message's header and a spam marker will be added to the message's subject.
Quarantine: The message will be blocked and stored in the e-mail quarantine. Quarantined messages can be reviewed either through the User Portal or the daily Quarantine Report.


Expression Filter
The expression filter scans the message's subject and body for specific expressions. E-mails that contain an expression listed here will be blocked. However, if the prefetch option is enabled on the Email Protection > POP3 > Advanced tab, the e-mail will be sent to the quarantine. Expressions can be entered as Perl Compatible Regular Expressions. Simple strings such as "online dating" are interpreted in a case-insensitive manner.

Sender Blacklist
The envelope sender of incoming POP3 sessions will be matched against the addresses on this blacklist. If the envelope sender is found on the blacklist the message will be quarantined and marked as Other in the subject line.
To add a new address pattern to the blacklist click the plus icon in the Blacklisted Address Patterns box, enter (a part of) an address, and click Apply. You can use an asterisk (*) as a wildcard, e.g., *@abbeybnknational.com.


why is there a difference between whether or not using prefetching? Also, why is the 'expression filter' blocking the mail and 'sender blacklist' quarantining it?

I would like a black hole option for expressions or entries on the sender blacklist since that's confirmed spam to me and don't need to have it appearing on the quarantine report.

Franc.

Viewing all articles
Browse latest Browse all 14361

Trending Articles