ePrism User Guide - EdgeWave

Anti-Spam Features
Select the Message Part you want to filter on. ePrism allows you to filter on the following parameters:
Message Envelope Parameters
These parameters will not be visible to the user. They are the "handshake" part of the SMTP
protocol. You will need to look for these in the transport logs or have other knowledge of them.
• — This parameter allows for a match on any part of the message
envelope which includes the HELO, Client IP and Client Host.
• HELO — This field is easily faked, and is not recommended for use in spam control. It may be
useful in whitelisting a source of mail. Example: mail.example.com.
• Client IP — This field will be accurately reported and may be reliably used for both blacklisting
and whitelisting. It is the IP address of the system initiating the SMTP connection. Example:
192.168.1.200.
• Client Host — This field will be accurately reported and may be reliably used for both
blacklisting and whitelisting. Example: mail.example.com.
The following envelope parameters (Envelope Addr, Envelope To and Envelope From) may be visible if
your client supports reading the message source, such as with ePrism Mail Client. They can also be
found in the transport logs. Other header fields may be visible as supported by the mail client.
• Envelope Addr — This matches on either the Envelope To or Envelope From. These fields are
easily faked, and are not recommended for use in spam control. They may be useful in
whitelisting a source of mail. Example: fred@example.com.
• Envelope To — This field is easily faked, and is not recommended for use in spam control. It
may be useful in whitelisting a source of mail. Example: fred@example.com.
• Envelope From — This field is easily faked, and is not recommended for use in spam control.
It may be useful in whitelisting a source of mail. Example: fred@example.com.
Message Header Parameters
Spammers will typically enter false information into these fields and, except for the Subject field,
they are usually not useful in controlling spam. These fields may be useful in whitelisting certain
users or legitimate source of email.
• — This parameter allows for a match on any part of the message header.
• — This parameter matches the To: or CC: fields.
• CC:
• From:
• Message-ID:
• Received:
• Reply-to:
• Sender:
• Subject:
110