D-Link NetDefendOS User Manual page 530

An example of this kind of tagging is if the original Subject field is:
Buy this stock today!
If the tag text is defined to be "*** Probably SPAM ***", then the modified email's Subject
field will become:
*** Probably SPAM *** Buy this stock today!
The line above is what the email's recipient will see in the summary of their inbox contents.
The individual user could then decide to set up their own filters in the local client to deal with
such tagged emails, possibly sending it to a separate folder.
• Tag Header
This is also enabled by default and it inserts X-Spam information into the bottom of the email
header data which describes the anti-spam processing that has been performed on the email.
When enabled, this indicates if the email is considered spam or not. This information may not
be immediately visible to the recipient but many email clients will provide the option to view
it and many will also allow it to be part of the client's filtering criteria.
The X-Spam fields inserted by NetDefendOS are as follows:
i. X-Spam-Checker-Version - The software that tagged the email.
ii. X-Spam-Status - A list that includes the scoring and the filters applied.
iii. X-Spam-Flag - Included only for emails marked as spam and always Yes.
iv. X-Spam-Report - A detailed list of the results from applied filters.
An example of inserted X-SPAM information for an email that was flagged as spam is the
following:
X-Spam-Checker-Version: D-Link NetDefendOS on Device
X-Spam-Status:
Yes, score=30 required=10 tests=LINK_PROTECTION,DCC,DNS_BLACKLIST_1
X-Spam-Flag: Yes
X-Spam-Report:
* 10 LINK_PROTECTION: Contained undesirable web links
* 10 DCC: Checksum reported >= 16777200 times
* 10 DNS_BLACKLIST_1: Blacklisted source IP address
An example of inserted X-SPAM information for an email that was not flagged as spam is the
following:
X-Spam-Checker-Version: D-Link NetDefendOS on Device
X-Spam-Status: No, score=5 required=10 tests=DNS_BLACKLIST_1
Malicious Link Protection
The Malicious Link Protection filter for anti-spam allows undesirable links in email traffic to be
neutralized as the email passes through NetDefendOS. It is part of anti-spam filtering and can
only be enabled when anti-spam is enabled. Links within emails are evaluated by NetDefendOS
using the Dynamic Web Content Filtering subsystem which is described in Section 6.3.4, "Dynamic
Web Content Filtering".
The following points should be noted for the link protection:
530
Chapter 6: Security Mechanisms