Installation manual

38
3.3.2 Antispam engine
In here, you can configure Antispam engine parameters. You can do so by clicking on Setup... button. A window
will open where you can configure these Antispam engine parameters.
Message categorization
The ESET Mail Security Antispam engine assigns a spam score from 0 to 100 to every scanned message. By
changing the limits of spam scores in this section, you can influence:
1) whether a message will be classified as SPAM or not-SPAM. All messages that have a spam score equal to or
higher than the Spam score to treat a message as spam: value are considered SPAM. As a consequence,
actions set in the Transport agent will be applied to these messages.
2) if a message will be recorded in the antispam log (Tools > Log files > Antispam). All messages that have a
spam score value equal to or higher than the Spam score threshold to treat a message as probable spam or
probable clean: value are recorded by the log.
3) what section of antispam statistics will the message in question be counted in (Protection status > Statistics >
Mail server antispam protection):
Messages evaluated as SPAM – the message's spam score is equal to or higher than the value set for Spam score
to treat message as spam:
Messages evaluated as probably SPAM: - the message's spam score is equal to or higher than the value set for
Spam score threshold to treat a message as probable spam or probable clean:
Messages evaluated as probably NOT SPAM - the message's spam score is lower that the value set for Spam
score threshold to treat a message as probable spam or probable clean:
Messages evaluated as NOT SPAM – the message's spam score is equal or lower than the value set for Spam
score to treat message as not spam:
3.3.2.1 Antispam engine parameter setup
3.3.2.1.1 Analysis
In this section, you can configure how messages are analysed for SPAM and subsequently processed.
Scan message attachments - This option lets you choose whether the antispam engine will scan and consider
attachments when computing the spam score.
Use both MIME sections - The antispam engine will analyze both text/plain and text/html MIME sections in a
message. If additional performance is desired, it is possible to only analyze one section. If this option is unchecked
(disabled), then only one section will be analyzed.
Memory size for score calculation (in bytes): - This option instructs the antispam engine not to read more than a
configurable number of bytes from the message buffer when processing rules.
Memory size for sample calculation (in bytes): - This option instructs the antispam engine not to read more than
the defined bytes when computing the message fingerprint. This is useful for getting consistent fingerprints.
Use LegitRepute cache memory - Enables usage of a LegitRepute cache to reduce false positives especially for
newsletters.
Convert to UNICODE - Improves accuracy and throughput for email message bodies in Unicode especially double-
byte languages by converting the message into single-bytes.
Use domain cache memory - Enables usage of a domain reputation cache. If enabled, domains are extracted from
messages and compared against a domain reputation cache.
36
92