User manual KASPERSKY LAB KASPERSKY ANTI-SPAM 2.0 ENTERPRISE EDITION & ISP EDITION

[. . . ] KASPERSKY LAB Kaspersky Anti-Spam 2. 0 Enterprise Edition / ISP Edition ADMINISTRATOR'S GUIDE KASPERSKY ANTI-SPAM 2. 0 ENTERPRISE EDITION / ISP EDITION Administrator's Guide © Kaspersky Lab http://www. kaspersky. com © Ashmanov & Partners Ltd. http://www. ashmanov. com Revision Date: June 2004 Contents CHAPTER 1. KASPERSKY ANTI-SPAM 2. 0 ENTERPRISE EDITION / ISP EDITION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . What's new in Kaspersky Anti-Spam 2. 0 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] Profiles differing from each other only in the order of rules applied may have completely different results when processing the same message. For example, suppose that a certain filter profile consists of two rules where rule A rejects messages from servers without a DNS-name (the action), and rule B receives messages from the servers included in the white list (the accept action). Then a message arriving from a server without a DNS-name included in this white list: · · will be rejected if rule A is executed first (after its execution the message processing will stop and rule B will not be applied). will be delivered to the recipient if rule B is executed first (after its execution the message processing will stop and rule A will not be applied). To move the existing filtering rule one level up: 1. Click the button to the right of the rule. To move the existing filtering rule one level down: 1. Editing filter profile name, description and field of application Filter profile parameters can be edited in the Profile properties window (see Figure 9) opened by the properties button in the list of profile rules (see Figure 7). You can manually edit the following common profile parameters: · · Name ­ profile name Description ­ profile description Profile description remains empty upon the profile creation and (No description) will be displayed in the profile editing window. 58 Kaspersky Anti-Spam 2. 0 Enterprise Edition / ISP Edition The common profile type, as well as the filename of the file where its description is saved, cannot be changed. Figure 9. Editing common profile properties In addition, you can edit the field of application for personal profile (see Figure 10) using the Valid for recipient(s) or Valid for recipient list parameters (see para 5. 2. 2. 1, page 52 for more details). Editing personal profile properties Configuring Filtering Parameters 59 5. 2. 3. 6. Saving profiles Editing of filter profiles (as well as e-mail and IP address lists, etc. ) is performed using copies of the configuration files (see para 5. 2. 8, page 87). Changes to these files are saved by clicking the accept button each time a filtering rule or parameter is edited. However this will not affect the filter operation before the new filter configuration, obtained as a result of editing, has been saved. To save and enable changes made to a filter profile description and other configuration files: Click the save button in the profile editing window (see Figure 7). Filter configuration obtained as a result of editing is saved completely ­ all profiles, e-mail, and IP address lists, etc. After saving the configuration files WebConfigurator automatically starts Configuration compiler that creates binary files from XML text files used during the filter operation. 5. 2. 4. Filtering rule edit page A filtering rule consists of two lists ­ conditions that should be met in order for the rule to work, and actions that are executed if all the conditions are met. You can add, edit, and delete conditions and actions in the Rule properties window (see Figure 11). 60 Kaspersky Anti-Spam 2. 0 Enterprise Edition / ISP Edition Figure 11. Filtering rule editing The order of conditions does not matter since all of them must be met in order for the rule to be applied. The actions are executed according to the order in which they are displayed in the table (THEN DO) in the right part of the filtering rule editing window 7. symbol next to the action name shows that the action is severe or The moderately severe and the operation of the current rule stops after it is executed. Thus, no action, preceded by this action in the table, will be executed. The symbol before a condition or an action shows either that the description of this condition (action) is incorrect or that this condition (action) cannot be used. [. . . ] Its unique combination of services allows users to identify and wipe out up to 95% of unwanted traffic. Installed at the entrance to a network, where it monitors incoming e-mail traffic streams for objects identified as spam, Kaspersky® Anti-Spam acts as a barrier to unsolicited e-mail. The product is compatible with any mail system and can be installed on either an existing mail server or a dedicated one. Kaspersky® Anti-Spam's high performance is ensured by daily updating of the content filtration database with samples provided by the Company's linguistic laboratory specialists. ® Kaspersky Anti-Spam Personal Kaspersky® Anti-Spam Personal is designed to protect users of mail client programs Microsoft Outlook and Microsoft Outlook Express against unwanted email messages (spam). Appendix B 131 Kaspersky® Anti-Spam Personal software package is a powerful tool that ensures detection of spam in the flow of e-mail messages incoming via POP3 and IMAP4 protocol (only for Microsoft Outlook). [. . . ]