Installation manual

84
HTML Image Type spam
Spam messages often take the form of pictures as another evasive
strategy applied against antispam detection methods. Such pictures
usually contain interactive links to web pages.
URL formatting hosting service domain
URL address contains the hosting service domain.
Spammy keyword ...
Message contains words typical for spam.
Email header inconsistency
Information in the header is altered to pose as a source other than the
original sender.
Virus
Message contains a suspicious attachment.
Phish
Message contains text that is typical to phishing messages.
Replica
Message contains text that is typical for a category of spam oriented at
offering replicas.
Generic spam indicator
Message containing words/characters that is typical for spam, as e.g.
"Dear friend", "hello winner", "!!!" etc.
Ham indicator
This is an indicator that has the opposite function as the other listed
indicators. It analyzes elements characteristic for regular solicited mail.
It lowers the overall spam score.
Non-specific spam indicator
Message contains other spam elements, such as base64 coding.
Custom spam phrases
Other typical spam phrases.
URL is blacklisted
URL in the message is on a blacklist.
IP %s is on RBL
IP address ... is on a RBL list.
URL %s is on DNSBL
URL address ... is on a DNSBL list.
URL %s is on RBL or the server is not
entitled to send mail
URL address ... is on a RBL list, or the server does not have the required
privileges to send email messages. Addresses which were part of the
email's route are verified against the RBL list. The last address is tested
regarding its connectivity rights to public mail servers. If it's impossible
to detect valid connectivity rights, the address is on the LBL list.
Messages marked as spam, because of an LBL indicator have the
following text stated in their Reason field: "server is not entitled to send
mail".
Action – action performed on the message. Possible actions:
Retained
No action has been performed on the message.
Quarantined
Message was moved into quarantine.
Cleaned and quarantined
The virus had been removed from the message and the message was quarantined.
Rejected
Message was denied and the SMTP reject answer sent to the sender.
Deleted
Message was deleted using silent drop .
Received – time the message was received by the server.
NOTE: If mails are received via an email server, the times in the Time and Received fields are practically identical.
19
19