IBM AH0QXML User Guide - Page 87

Chapter 5. Using mail file rules to prevent spam

75

Scanning for text content

Mail rules also allow you to scan the subject or body fields for content that can

help you determine the disposition of an incoming e-mail. For example, if you are

always interested in e-mail about

Spacely Sprockets

, you can create a mail rule

that scans for Spacely Sprockets in the subject and body fields and places that

e-mail message into a Spacely Sprockets folder. Similarly, you can scan for

certain words and phrases that are characteristic of spam mail. For example,

many spam mail messages are solicitations for purchase of products or services

at a discount. Given the nature of this type of message, you can create a mail

rule that scans for text

% off

. Then, if the % off text is found in a message it can

be redirected to the Suspicious folder.

You should be deliberate in your consideration of what text phrases constitute

spam, and on what action to take for suspected spam messages. Some

language (profanity, for example) can be indicative of spam, but might also be

present in an e-mail from an unsatisfied customer. These issues must always be

considered when putting mail rules in place because

“

false positives

”

(desired

e-mail that has been classified as spam) can result.

Filing mail with unacceptable subject content

As a new feature in Notes 6, the number of unread items in your e-mail show next

to names of the folders they are in. For example, if you have 2 unread documents

in your Incoming/Suspicious mail folder, then the folder name will appear in bold

with (2) next to it. When this feature is coupled with rules that file incoming e-mail

into folders automatically, you can easily tell where your new unread mail is. In

the following figure we have created just such a rule that files mail with

unacceptable words in the subject.

Figure 5-6

Subject scanning rule

In Figure 5-6 we show a rule that scans for specific words in the subject of

incoming e-mail; if the subject contains these words the mail is filed in the

Incoming\Suspicious folder. When using the

Contains

action, remember that it is

not case sensitive and it is not matching on whole words. For example, if

scanning for

adv

, then words like

Advice

or

Advertising

would also cause a

match. In this example, we

’

re scanning for Adv: or xxxx.

Section	Page
Front cover	1
Contents	5
Notices	7
Trademarks	8
Preface	9
The team that wrote this redbook	9
Become a published author	11
Comments welcome	12
Chapter 1. Introduction	13
1.1 Definition of spam	14
1.2 Categorizing spam	14
Chapter 2. Preventing unwanted e-mail and spam	19
2.1 Spam avoidance techniques	20
2.1.1 Passive harvesting attacks	20
2.1.2 Avoiding harvesting	21
2.1.3 Confusing the harvesters	22
2.1.4 Inform Users	22
2.2 How to block spam	24
2.2.1 At the gateway	25
2.2.2 At the server	25
2.2.3 By the end user	26
2.2.4 Selecting the best approach	26
2.2.5 Managing the ongoing anti-spam campaign	27
2.2.6 Summary	28
Chapter 3. Domino 6 anti-spam architecture	29
3.1 The Domino messaging environment	30
3.2 Domino 6 messaging components	32
3.2.1 SMTP Listener/Server	33
3.2.2 Router	35
3.3 Domino 6 anti-spam configuration	35
3.3.1 Server configuration features	36
3.3.2 User configuration features	37
3.4 Common problems and solutions	37
Chapter 4. Domino 6 Server anti-spam features	41
4.1 How to detect spam	42
4.1.1 Examining the message properties	42
4.1.2 Separating legitimate e-mail from spam based on content	43
4.2 Controlling connections from spammers	44
4.2.1 DNS Blacklist filters	44
4.2.2 Inbound Intended Recipients Controls	48
4.2.3 Disable routing mail to groups	51
4.2.4 Inbound connection controls	53
4.2.5 Inbound sender controls	54
4.3 Controlling delivery of spam	57
4.3.1 Server mail rules	57
4.4 Controlling use of your server as a relay	66
4.4.1 Inbound relay controls	66
4.4.2 Inbound relay enforcement	71
4.5 Protecting your Domino server from active address harvesting attacks	74
4.5.1 SMTP harvesting attacks	74
4.5.2 Spam mail bombing	74
4.5.3 Direct SMTP RCPT TO harvesting	74
4.5.4 Defending against active attacks	75
Chapter 5. Using mail file rules to prevent spam	77
5.1 Distinguishing between spam and legitimate e-mail	78
5.2 Mail file rules	80
5.2.1 Setting up mail file rules	80
5.2.2 Developing anti-spam mail file rules	83
5.2.3 Viewing mail rules and the evaluation sequence	89
5.2.4 Monitoring mail file rules	90
Chapter 6. Third party anti-spam products	93
6.1 Anti-spam products for Notes and Domino	94
6.1.1 spamJam for Lotus Notes and Domino	94
6.1.2 SpamEraser for Lotus Notes and Domino 6	97
6.1.3 iQ.Suite	100
6.1.4 ScanMail for Lotus Notes with eManager	101
6.1.5 XM SpamStop	104
6.1.6 Other anti-spam products for Notes and Domino	106
6.2 Anti-spam server and gateway products and services	106
6.2.1 BrightMail Anti-Spam 4.0 from BrightMail, Inc.	106
6.2.2 ActiveState PureMessage	107
6.2.3 Trend Micro Inc. products	109
6.2.4 Other anti-spam server or gateway products and services	110
Related publications	111
IBM Redbooks	111
Referenced Web sites	111
How to get IBM Redbooks	112
IBM Redbooks collections	112
Index	113

IBM AH0QXML User Guide - Page 87

Scanning for text content, Filing mail with unacceptable subject content, Spacely Sprockets, Contains

Page 87 highlights