F-Secure Internet Gatekeeper for Linux/Administrator’s Guide
59
In the text body, this checks whether the character string matches the leading
characters of each line. Prefix search cannot be used for the HTML body.
Backward search
Compare whether the trailing characters of the specified field match the character
string.
In the text body, this checks whether the character string matches the trailing
characters of each line. Backward matching cannot be used for the HTML body.
Not
The rule is satisfied if there is no match with the specified character string.
“AND” with previous rule
The rule is satisfied if both the specified rule and the previous rule are satisfied. In
this case, the previous rule is typically set to "no action".
“AND” with previous rule in the same MIME part
The rule is satisfied if both the specified rule and the previous rule are satisfied for
the same MIME part. You can use this to specify a rule for both the Content-Type
and file name of an attached file, for example.
In this case, the previous rule is typically set to "no action".
When you specify e-mail addresses, do not use forward or backward matching.
If you use , the e-mail address is not recognized correctly. This is because the From,
To, and other headers contain additional characters before and after the e-mail
address (example: "Xxx Yyy <[email protected]>").
Filter as
Specifies the judgment result if the specified rule is satisfied. Select one of "spam",
"not spam", or "no action".
The specified list of conditions is saved in /opt/f-secure/fsigk/conf/spam/custom.txt.
The file lists one condition per line. The “Judgment”, “Field name”, “Compare method”,
and “Text to scan for” are separated by tabs.
•
The “Judgment” setting is specified as "BLACK" (spam), "WHITE" (not spam), or
"NONE" (no action).
•
“Field name” contains either a field name or "FILENAME" (file name), "FILESIZE"
(file size), "TEXTBODY" (text body), "HTMLBODY" (HTML body), "URLHOST"
(link host name), "RELAYIP" (relay addresses), or "ALWAYS" (always).
•
“Compare method” contains "IGNORECASE" (not case sensitive),
"HEADMATCH" (forward matching), "TAILMATCH" (backward matching), "NOT"
(not equal), "AND" (AND with previous condition (same MIME part)), or
"AND_SAMEPART" (AND with previous condition (same MIME part)).
•
The character strings in “Text to scan for” are separated by commas (",").
Spam detection engine
Spam Detection Engine
(spam_commtouch)
This setting enables or disables the spam detection engine. The spam detection engine
enhances the spam scanning on both SMTP and POP proxies.