User manual

Criterion Description
Avira SPACE results Avira SPACE checks incoming mail against known
spam patterns.
Combined Header Criteria
Criterion Description
Suspicious sender properties Checks whether the message has a “From” header
and whether this header is completed and
corresponds with the sender in the SMTP protocol.
Suspicious recipient properties Checks whether the message contains a “To”
header, whether this header is completed and
whether it or the “CC” header contains at least one
of the SMTP recipients.
Digits in sender address(es) Checks whether one of the sender addresses
(SMTP or mail header) contains digits.
Number of recipients per e-mail Checks the number of recipients of an e-mail.
Known spam x-mailer Checks whether the X-Mailer entry in the message
is a known spam mail client.
Known spam results Takes into account the result of a preceding spam
analysis for the classification of e-mails as spam or
non spam. The result (number of spam
characters found) is written to the X-header of the
e-mail. Avira AntiVir Exchange analyzes the
X-header and writes the number of spam
characters into the criterion. The evaluation is
performed on the basis of the minimum/maximum
number of spam characters. The result may come
from an external system or be determined by an
Avira AntiVir Exchange system on another server.
Combined Subject Criteria
Criterion Description
Missing subject Checks whether the message has a subject field
with content.
Recipient address in subject Checks whether the part before the @ of a
recipient address is found in the subject of the
e-mail.
Junk sequence in subject Checks whether the e-mail subject contains long
strings of spaces or meaningless character strings.
Emails containing these phrases Checks whether the e-mail subject contains words
typically found in spam mail.
Emails containing these concealed words Checks whether the e-mail subject contains any
concealed words from the dictionaries specified.
Combined Message Body Criteria
Avira AntiVir Exchange 7
148