ZyXEL ZyWALL 5 User Guide - Page 323

Chapter 16 Anti-Spam Screens The following table describes the labels in this screen. Table 91 SECURITY > ANTI-SPAM > Lists > Edit LABEL DESCRIPTION Rule Edit Active Turn this entry on to have the ZyWALL use it as part of the whitelist or blacklist. You must also turn on the use of the corresponding list (in the Anti-Spam Customization screen) and the anti-spam feature (in the Anti-Spam General screen). Type Use this field to base the entry on the e-mail's source IP address, source e-mail address or an MIME header. Select IP to have the ZyWALL check e-mail for a specific source IP address. You can create whitelist IP address entries for e-mail servers on your LAN or DMZ to speed up the ZyWALL's processing of your outgoing e-mail. Select E-Mail to have the ZyWALL check e-mail for a specific source e-mail address or domain name. You can create a whitelist entry for your company's domain name (or e-mail accounts) to speed up the ZyWALL's processing of e-mail sent by your company's employees. Select MIME Header to have the ZyWALL check e-mail for specific MIME headers or values. Configure blacklist MIME header entries to check for e-mail from bulk mail programs or that have content that are commonly used in spam. You can also configure whitelist MIME header entries to allow certain MIME headers or values that identify the e-mail as being from a trusted source. Select Subject to have the ZyWALL check e-mail for specific content in the subject line. IP Address This field displays when you select the IP type. Enter an IP address in dotted decimal notation. IP Subnet Mask This field displays when you select the IP type. Enter the subnet mask here, if applicable. E-Mail Address This field displays when you select the E-Mail type. Enter an e-mail address or domain name (up to 63 ASCII characters). You can enter an individual e-mail address like [email protected]. You can also use a wildcard (*). For example, if you configure *@def.com, any email address that ends in @def.com matches. So "[email protected]" matches. The wildcard can be anywhere in the text string and you can use more than one wildcard. You cannot use two wildcards side by side, there must be other characters between them. The ZyWALL can check up to the first 63 characters of an e-mail's address. The whitelist or blacklist check fails for addresses over 63 characters. However, a whitelist or blacklist entry that uses some text followed by a wildcard only requires the ZyWALL to check the number of characters before the wildcard. So the check would still work for addresses longer than 63 characters. For example, if you used "abc*", the ZyWALL would only check up to the first three characters of the e-mail address. Header This field displays when you select the MIME Header type. Type the header part (beginning with "X-") of an MIME header (up to 63 ASCII characters). In an MIME header, the header is the part that comes before the colon (:). For example, if you want the whitelist or blacklist entry to check for the MIME header "X-MSMail-Priority: Normal", enter "X-MSMail-Priority" here as the MIME header. ZyWALL 5/35/70 Series User's Guide 323