Administrator's Guide - Kerio Software Archive

16.3 Custom RulesTypeType of condition under which the entry will be tested. Available types:• Is empty — the item is empty• Is missing — the message does not contain the specified message header• Contains address — the item contains a specific email address• Contains address with domain — the item contains all email addresses from this domain.Enter the mail domain, i.e. the second part of the email address right from the @character, in this field.• Contains substring — the item contains specific string of characters (a word, a piece oftext, a number, etc.).• Contains binary data — using this condition, the above-mentioned specific charactersas well as binary data that may be contained in spam messages can be recognized.Binary data are characters that have a different meaning in each character set (e.g.specific national characters).ContentRequired entry content (according to the selected type).Once a rule is set, select one of the following actions:Treat the message as non-spamMessages treated as spam may be accepted as non-spam using this option.Treat the message as spam and reject itAny message meeting the rule will be marked as spam and action set on the Action tabwill be applied to it, regardless of the spam filter.Add this value to the message’s spam scoreDefine score value for SpamAssassin (the higher the value, the lower is the possibility thata message passes through the filter). Value that you match with messages meeting thisrule will be added to the corresponding SpamAssassin evaluation (negative values protectmessages from being considered as spam).In case of this blacklist, the recommended score value is from 1 to 3 points.Examples:1. Suppose that you want that the server blocks all email sent fromsomeone@undesirable.com. Define a rule where the From entry will be tested.Choose the contains address condition type (particular email address) and specify theContent entry using the email address (someone@undesirable.com). In the Score entryspecify a value — this should be equal or higher than the value set in the Action tab.2. A user has demanded regular messages with current special offers. These messages aresent from info@offer.com and they are treated as spam by SpamAssassin. To overridethis denial, we will create the following custom rule:• Header — use the From selection• Type — select the Contains address option181