Symantec Mail Security, Administration Manual

Page: 64 / 258

64 Configuring email filtering
About email filtering
The following table shows the filtering actions available for each verdict.
Note:
See “Notes on filtering actions” on page 66 for additional limitations.
Table 4-2
Filtering actions by verdict
Action Description Verdict
Dir
ec
to
ry har
ves
t
at
ta
ck
S
p
am at
ta
ck
Vi
ru
s a
tt
ac
k
Vi
ru
s
Sp
am
, S
u
sp
ec
te
d
Sp
am
Co
n
te
n
t Co
m
p
li
an
ce
Add a header Add an X-header to the message.
● ● ● ● ● ●
Add annotation Insert predefined text into the message (a disclaimer, for
example).
● ● ● ● ● ●
Add BCC recipients Blind carbon copy the message to the designated SMTP
address(es).
● ● ● ● ● ●
Archive the message Deliver the original message and forward a copy to the
designated SMTP address, and, optionally, host.
● ● ● ● ● ●
Bounce the message Return the message to its
From:
address with a custom
response, and deliver it to the recipient. Optionally, the
original message can be included.
● ● ● ● ● ●
Clean the message Delete unrepairable virus infections and repair repairable
virus infections.
●
Defer SMTP
connection Using a 4xx SMTP response code, tell the sending MTA to
try again later.
● ● ●
Delay message delivery Hold the message in the Suspect Virus Quarantine for a
configured number of hours (default is six hours), then
refilter, using new virus definitions, if available. Only
available for the suspicious attachment verdict.
●
Delete the message Delete the message.
● ● ● ● ● ●
Deliver the message
normally Deliver the message. Viruses and mass-mailing worms
are neither cleaned nor deleted.
● ● ● ● ● ●