Symantec 10744983 Administration Guide - Page 108

108 Configuring email filtering Managing Email Firewall policies Virus attack A specified quantity of infected messages has been received from a particular IP address. By default, connections received from violating senders are deferred. Enable, disable, and configure attack recognition Set up attack recognition as described in the following sections. All attack recognition types are disabled by default, and must be enabled to be activated. To enable or disable attack recognition 1 In the Control Center, click Policies > Attacks. 2 Check the box next to each attack type that you want to enable or disable, or check the box next to Attacks to select all attack types. 3 Click Enable to enable the checked attack types, or click Disable to disable the checked attack types. To configure directory harvest, spam, and virus attack recognition 1 In the Control Center, click Policies > Attacks. 2 Click Directory Harvest Attack, Spam Attack orVirus Attack. 3 Accept the defaults or modify the values under Directory Harvest Attack Configuration. 4 Under Actions, accept the default recommended action Defer SMTP Connection, or change and/ add more actions. 5 Click Save. Configuring sender groups Filtering based on the source of the message, whether it's the sender's domain, email address or mail server IP connection, can be a powerful way to fine-tune filtering at your site.