Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 12: Electronic Mail
Configuring advanced anti-spam and anti-fraud options
• Apply rule to non-internet burbs—Select this option to allow this host
only for non-internet burbs.
4 In the Regular Expression field, enter the desired expression to match in
the header (for example, @.*gov, @cloudmark.com)
Note: Ensure that you are familiar with regular expressions before attempting to
configure this field.
5 [Optional] In the Description field, enter any useful information about this
host entry (for example, a brief description of the host).
6 Click OK to save the changes and return to the Whitelist Configuration tab.
Configuring the policy.cfg file
The policy.cfg file allows you to determine the actions that will be taken by the
spam filter on a per-burb basis when it encounters messages that are
suspected to be spam or fraud, including identity theft and phishing messages.
These configuration options are stored in the /etc/sidewinder/authority/
policy.cfg file. The policy.cfg file contains a list of the actions that will be taken
based on the disposition of an email message (that is, the likelihood of the
message being spam).
The basic structure of each action is as follows:
threshold=85%; action=ADDHEADER; config=[header=
[X-SPAM]; value=[%p%%]]
where:
• threshold—This field indicates the confidence level that is assigned to an
action.
– A high confidence level indicates that a message is likely to be spam.
– A low confidence level indicates that a message is unlikely to be spam.
– Threshold values can be any integer from 0–100, specified as a
percentage.
– Each action must have a unique threshold value.
• action—This field specifies the action that will be taken for a message
based on the threshold defined. The available actions are described in the
following sections.
• config—The configuration options allow you to specify additional attributes
for a particular action. The available configuration options for each action
are described in the following sections.
359