Product manual

GFI MailEssentials 7 Anti-Spam | 102
FILTER DESCRIPTION ENABLED BY
DEFAULT
DirectorHarvesting Directory harvesting attacks occur when spammers try to guess email
addresses by attaching well known usernames to your domain. The
majority of the email addresses are non-existent.
Yes (only if GFI
MailEssentials is
installed in an Active
Directory
environment)
Email Blocklist The Email Blocklist is a custom database of email addresses and domains
from which you never want to receive emails.
Yes
IP DNS Blocklist IPDNSBlocklist checks the IP address of the sending mail server against
a public list of mail servers known to send spam.
Yes
URI DNS Blocklist Stops emails that contain links to domains listed on public Spam URI
Blocklists.
Yes
Sender Policy
Framework
This filter uses SPFrecords to stop email sent from forged IPaddresses
by identifying if the sender IPaddress is authorized.
No
Anti-Spoofing Checks emails received with a sender email address claiming to
originate from your own domain against a list of IP addresses by GFI
MailEssentials. If the sender IP address is not on the list of own-domain
server IP addresses, email is blocked.
No
Greylist The Greylist filter temporarily blocks incoming emails received from
unknown senders. Legitimate mail systems typically try to send the
email after a few minutes; spammers simply ignore such error messages.
No
Header Checking The Header Checking filter analyses the email header to identify spam
emails.
Yes
Spam Keyword
Checking
This filter enables the identification of Spam based on keywords in the
email being received.
No
Bayesian analysis An anti-spam filter that can be trained to accurately determine if an
email is spam based on past experience.
No
Whitelist The Whitelist contains lists of criteria that identify legitimate email.
Emails that match these criteria are not scanned by anti-spam filters
and are always delivered to the recipient.
Yes
New Senders The New Senders filter identifies emails that have been received from
senders to whom emails have never been sent before.
No
7.1.1 SpamRazer
An anti-spam engine that determines if an email is spam by using email reputation, message
fingerprinting and content analysis. SpamRazer is the primary anti-spam engine and is enabled by
default on installation. Frequent updates are released for SpamRazer that will further increase the
response time to new trends of spam.
SpamRazer also includes Sender Policy Framework filtering which detects forged senders. It is
recommended that senders publish their mail server in an SPF record. For more information on SPF
and how it works, visit the Sender Policy Framework website at: http://www.openspf.org.
This filter also blocks NDR spam. For more information on NDR spam refer to
http://go.gfi.com/?pageid=ME_NDRSpam
Configuring SpamRazer
NOTE
Disabling SpamRazer is NOT recommended.