McAfee MAP-3300-SWG - Web Security Appliance 3300, Руководство по эксплуатации продукта

Страница: 124 / 336

Table 99 Option definitions
Option Definition
Domain name Specifies locations of servers that maintain real-time blackhole lists.
If the sender fails
the check
Provides actions to take. For example:
Allow through (Monitor)
- lets messages from sending email domains pass through the
appliance on to their intended recipients.
Tarpit
- delays the response to the email message.
Add to score
- increase the spam score for messages from these domains.
Accept and drop (Block)
- accepts the message but drops the connection.
Reject (Block)
- rejects the message..
Reject and close (Block)
- rejects the message and closes the connection.
Tarpit
- delays the response to the email message.
Reject, close and deny (Block)
- Kernel Mode Blocking. This is an effective method of
combating spam, as it deals with the message itself (reject), the connection (close)
and adds the sending server to the deny list.
The default action is
Reject, close and deny (Block)
Sender Authentication Settings — SPF, Sender ID and DKIM
Use this page to specify settings for techniques that determine whether the sender of an email
message is genuine.
These techniques reduce the workload for the appliance, because they reject suspicious email without
the need for scanning.
The appliance can take various actions according to whether the email passes or fails each check. You
can use each type of authentication separately or combine the techniques by using scoring (or
"weighting").
Table 100 Option definitions
Option Definition
Enable SPF
or
Enable sender
ID
When selected, enables Sender Policy Framework (SPF) or Sender ID on the
appliance.
Add an SPF header to email
or
Add a sender ID header to
email
If selected, adds an extra header line to the email message.
After verifying an email message, the appliance attaches its own header to
the email message, which indicates to other mail servers in your
organization that the email message has been verified.
The headers include:
• Received-SPF header
• Received-PRA header
• X-NAI_DKIM_Results header
If the sender fails the check
Provides actions to take. For example:
Tarpit
- delays the response to the email message.
Add to score
- combines the results of several methods of sender authentication.
Overview of Email features
Email Policies
124 McAfee Email and Web Security Appliances 5.6.0 Product Guide