IronPort - Configuration Guide - AsyncOS 7.6.1

9-14
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
Chapter 9 Anti-Spam
The Mail Policies > Incoming or Outgoing Mail Policies page is refreshed to reflect the values you chose
in the previous steps.
Notes on Configuring Settings for Identified Messages
Positive/Suspected Spam Threshold
Action to Apply
Archiving Identified Messages
Altering the Subject Header
Enter a threshold value for positively identified spam and a value for suspected spam. For more
information about spam thresholds, see Positive and Suspect Spam Threshold, page 9-15.
Choose which overall action to take on positively identified spam, suspected spam, or unwanted
marketing messages: Deliver, Drop, Bounce, or Quarantine.
You can archive identified messages into the “Anti-Spam Archive” log. The format is an mbox-format
log file. For more information, see the example below and refer to the “Logging” chapter of the Cisco
IronPort AsyncOS for Email Daily Management Guide.
You can alter the text of the Subject header on identified messages by prepending or appending certain
text strings to help users more easily identify and sort spam and unwanted marketing messages.
Note White space is not ignored in the “Modify message subject” field. Add spaces after (if prepending) or
before (if appending) the text you enter in this field to separate your added text from the original subject
of the message. For example, add the text [SPAM] with a few trailing spaces if you are prepending.
Note The “Add text to message” field only accepts US-ASCII characters.
Sending Identified Messages to an Alternate Destination Host
Adding a Custom X-Header
Changing the Envelope Recipient Address
You can send identified messages to an alternate destination mailhost.
You can add a custom X-Header to identified messages.
Click Yes and define the header name and text.
You can have identified messages sent to an alternate envelope recipient address.
Click Yes and define an alternate address.
For example, you could route messages identified as spam to an administrator’s mailbox for subsequent
examination. In the case of a multi-recipient message, only a single copy is sent to the alternate recipient.
OL-25136-01