Table 90 Security > Anti-Spam > Lists > Edit - ZyXEL Communications ZYWALL 35 User Manual

Chapter 15 Anti-Spam
The following table describes the labels in this screen.
Table 90 SECURITY > ANTI-SPAM > Lists > Edit
LABEL
Rule Edit
Active
Type
IP Address
IP Subnet Mask
E-Mail Address
318
DESCRIPTION
Turn this entry on to have the ZyWALL use it as part of the whitelist or blacklist.
You must also turn on the use of the corresponding list (in the Anti-Spam
Customization screen) and the anti-spam feature (in the Anti-Spam General
screen).
Use this field to base the entry on the e-mail's source IP address, source e-mail
address or an MIME header.
Select IP to have the ZyWALL check e-mail for a specific source IP address.
You can create whitelist IP address entries for e-mail servers on your LAN or DMZ
to speed up the ZyWALL's processing of your outgoing e-mail.
Select E-Mail to have the ZyWALL check e-mail for a specific source e-mail
address or domain name.
You can create a whitelist entry for your company's domain name (or e-mail
accounts) to speed up the ZyWALL's processing of e-mail sent by your company's
employees.
Select MIME Header to have the ZyWALL check e-mail for specific MIME headers
or values.
Configure blacklist MIME header entries to check for e-mail from bulk mail
programs or that have content that are commonly used in spam. You can also
configure whitelist MIME header entries to allow certain MIME headers or values
that identify the e-mail as being from a trusted source.
Select Subject to have the ZyWALL check e-mail for specific content in the subject
line.
This field displays when you select the IP type. Enter an IP address in dotted
decimal notation.
This field displays when you select the IP type. Enter the subnet mask here, if
applicable.
This field displays when you select the E-Mail type. Enter an e-mail address or
domain name (up to 63 ASCII characters).
You can enter an individual e-mail address like abc@def.com.
If you enter a domain name, the ZyWALL searches the source e-mail address
string after the "@" symbol to see if it matches the domain name. For example, you
configure a entry with "def.com" as the domain name. E-mails sent from def.com e-
mail addresses such as "abc@def.com" match the entry. E-mails sent from
mail.def.com, such as abc@mail.def.com do not match the entry since
"mail.def.com" does not match "def.com".
You can also use a wildcard (*). For example, if you configure *def.com, any e-mail
address that ends in def.com matches. So "mail.def.com" matches.
The wildcard can be anywhere in the text string and you can use more than one
wildcard. You cannot use two wildcards side by side, there must be other
characters between them.
The ZyWALL can check up to the first 63 characters of an e-mail's address. The
whitelist or blacklist check fails for addresses over 63 characters. However, a
whitelist or blacklist entry that uses some text followed by a wildcard only requires
the ZyWALL to check the number of characters before the wildcard. So the check
would still work for addresses longer than 63 characters. For example, if you used
"abc*", the ZyWALL would only check up to the first three characters of the e-mail
address.
ZyWALL 5/35/70 Series User's Guide