UTM Antispam Filtering for Security Devices - Juniper Networks

More documents

Recommendations

Info

UTM Antispam Filtering for Security Devices 8 Related Documentation 1. The local whitelist is checked. If there is a match, no further checking is done. If there is no match... 2. The local blacklist is checked. If there is a match, no further checking is done. If there is no match... 3. The SBL server list is checked. NOTE: SBL server matching stops when the antispam license key is expired. • Unified Threat Management on page 3 • Antispam Filtering Overview on page 5 • Server-Based Antispam Filtering Configuration Overview on page 13 • Example: Configuring Server-Based Antispam Filtering on page 14 • Local List Antispam Filtering Configuration Overview on page 21 • Understanding Local List Antispam Filtering on page 9 • Handling Spam Messages on page 79 • UTM Antispam Filtering for Security Devices Copyright © 2013, Juniper Networks, Inc.
CHAPTER 4 Local List Antispam Filtering • Understanding Local List Antispam Filtering on page 9 Understanding Local List Antispam Filtering Copyright © 2013, Juniper Networks, Inc. When creating your own local whitelist and blacklist for antispam filtering, you can filter against domain names, e-mail addresses, and/or IP addresses. Pattern matching works a bit differently depending upon the type of matching in question. For example, pattern matching for domain names uses a longest suffix match algorithm. If the sender e-mail address has a domain name of aaa.bbb.ccc, the device tries to match "aaa.bbb.ccc" in the list. If no match is found, it tries to match "bbb.ccc", and then "ccc". IP address matching, however, does not allow for partial matches. Antispam filtering uses local lists for matching in the following manner: 1. Sender IP: The sender IP is checked against the local whitelist, then the local blacklist, and then the SBL IP-based server (if enabled). 2. Sender Domain: The domain name is checked against the local whitelist and then against the local blacklist. 3. Sender E-mail Address: The sender e-mail address is checked against the local whitelist and then against the local blacklist. By default, the device first checks incoming e-mail against the local whitelist and blacklist. If the sender is not found on either list, the device proceeds to query the SBL server over the Internet. When both server-based antispam filtering and local list antispam filtering are enabled, checks are done in the following order: 1. The local whitelist is checked. If there is a match, no further checking is done. If there is no match... 2. The local blacklist is checked. If there is a match, no further checking is done. If there is no match... 3. The SBL server list is checked. NOTE: Local black and whitelist matching continues after the antispam license key is expired. 9
Page 1 and 2: Junos ® OS UTM Antispam Filtering
Page 3 and 4: Table of Contents Part 1 Overview A
Page 5 and 6: List of Tables Part 1 Overview Abou
Page 7 and 8: About the Documentation • Documen
Page 9 and 10: Merging a Snippet Documentation Con
Page 11 and 12: Table 2: Text and Syntax Convention
Page 13 and 14: PART 1 Overview Copyright © 2013,
Page 15 and 16: CHAPTER 1 Supported Features Unifie
Page 17 and 18: CHAPTER 2 Antispam Filtering Antisp
Page 19: CHAPTER 3 Server-Based Antispam Fil
Page 23 and 24: PART 2 Configuration Copyright © 2
Page 25 and 26: CHAPTER 5 Server-Based Antispam Fil
Page 27 and 28: Copyright © 2013, Juniper Networks
Page 31 and 32: Action From operational mode, enter
Page 33 and 34: CHAPTER 6 Local List Antispam Filte
Page 37 and 38: Step-by-Step Procedure Copyright ©
Page 39 and 40: Verification destination-address an
Page 41 and 42: CHAPTER 7 Configuration Statements
Page 45 and 46: • Application Quality of Service
Page 53 and 54: address-blacklist Syntax address-bl
Page 55 and 56: custom-objects Syntax custom-object
Page 57 and 58: feature-profile Syntax feature-prof
Page 63 and 64: Required Privilege Level Related Do
Page 65 and 66: edirect-wx | reverse-redirect-wx; s
Page 67 and 68: policies Syntax policies { default-
Page 71 and 72:
primary-server Syntax primary-serve
Page 73 and 74:
secondary-server Syntax secondary-s
Page 75 and 76:
edirect-wx | reverse-redirect-wx; s
Page 77 and 78:
traceoptions (Security Antispam) Sy
Page 79 and 80:
utm Syntax utm { application-proxy
Page 81 and 82:
Copyright © 2013, Juniper Networks
Page 83 and 84:
Page 85 and 86:
Page 87 and 88:
utm-policy Syntax utm-policy policy
Page 89 and 90:
PART 3 Administration Copyright ©
Page 91 and 92:
CHAPTER 8 Spam Message Handling Han
Page 93 and 94:
CHAPTER 9 Operational Commands Copy
Page 95 and 96:
show security utm anti-spam statist
Page 97 and 98:
show security utm status Syntax sho
Page 99 and 100:
PART 4 Index Copyright © 2013, Jun
Page 101 and 102:
Index Symbols #, comments in config
show all

UTM Antispam Filtering for Security Devices - Juniper Networks

Create successful ePaper yourself

Delete template?

Save as template?