User's Manual

ProSecure Web/Email Security Threat Management (STM) Appliance Reference Manual
Content Filtering and Optimizing Scans 4-15
v1.0, September 2009
2. Blacklist. E-mails from the specified sources are considered spam and are blocked.
3. Real-time blacklist. E-mails from known spam sources that are collected by blacklist
providers are blocked.
4. Distributed spam analysis. E-mails that are detected as spam by the NETGEAR Spam
Classification Center are either tagged, blocked, or quarantined.
This order of implementation ensures the optimum balance between spam prevention and system
performance. For example, if an e-mail originates from a whitelisted source, the STM delivers the
e-mail immediately to its destination inbox without implementing the other spam prevention
technologies, thereby speeding up mail delivery and conserving the STM system resources.
However, regardless of whether or not an e-mail is whitelisted, it it still be scanned by the STM’s
anti-malware engines.
You can configure these anti-spam options in conjunction with content filtering to optimize
blocking of unwanted mails.
Setting Up the Whitelist and Blacklist
You can specify e-mails that are accepted or blocked based on the originating IP address, domain,
and e-mail address by setting up the whitelist and blacklist. You can also specify e-mails that are
accepted based on the destination domain and e-mail address.
The whitelist ensures that e-mail from listed (that is, trusted) sources and recipients are not
mistakenly tagged as spam. E-mails going to and from these sources and recipients are delivered to
their destinations immediately, without being scanned by the anti-spam engines. This can help to
speed up the system and network performance. The blacklist, on the other hand, lists sources from
which all e-mail messages are blocked You can enter up to 200 entries per list, separated by
commas.
Note: E-mails that are sent through the STM over an authenticated connection between a
client and an SMTP mail server are not checked for spam.
Note: An e-mail that has been checked for spam by the STM contains an
“X-STM-SMTP” (for SMTP e-mails) or “X-STM-POP3” (for POP-3 e-mails) tag
in its header.
Note: The whitelist takes precedence over the blacklist, which means that if an e-mail
source is on both the blacklist and the whitelist, the e-mail is not scanned by the
anti-spam engines.