Kaspersky Lab kaspersky mail gateway 5.5 Mode D'Emploi
The principles of program operation
35
• subject – addition to the Subject header of a label
corresponding to the assigned status and content category.
• keywords – addition to the Keywords header of a label
corresponding to the assigned status and content category.
• none – addition of service headers (X-SpamTest-*) only to a
message.
• Basic actions of the AV module (see section 4.4 on p. 38 for details):
• pass – deliver an object without changes.
• cure – replacement of an infected object with a disinfected one.
• remove – delete infected object.
• placeholder – replace infected attachments with messages
• cure – replacement of an infected object with a disinfected one.
• remove – delete infected object.
• placeholder – replace infected attachments with messages
created using templates.
• Additional actions:
• Append additional informational fields to message header or
body (see section 6.12 on p. 80).
• Block delivery of messages to the recipients; see section 5.2.2
on p. 46 for a sample method to block delivery for spam
messages, and section 5.3.3 on p. 49 for messages containing
infected objects.
messages, and section 5.3.3 on p. 49 for messages containing
infected objects.
• Create and send alerts to the sender, administrator, and
recipient (see example in section 5.3.4 on p. 50).
• Quarantine a message; see section 5.2.3 on p. 46 for a sample
method to quarantine spam messages and section 5.3.6 on p.
52 for messages containing infected objects.
52 for messages containing infected objects.
4.3. Operation of the Spamtest filter
Spam filtering by Spamtest is performed during the third step of the procedure
described in section 4.2 on p. 32. Every message passes the following analysis
stages:
described in section 4.2 on p. 32. Every message passes the following analysis
stages:
• analysis of message headers using formal signs (see section 4.3.1 on
p. 36)
• analysis of message contents using the content filtration database (see
section 4.3.2 on p. 36).