How To Allow and Block s using White or Black List

Transcription

1 How To Allow and Block s using White or Black List Applicable Version: onwards Overview Cyberoam s Anti Spam detects Spam mails by checking IP addresses, Domain, addresses or RBL (Real-time Blackhole List). Cyberoam allows administrators to Whitelist or Blacklist Addresses. s from Whitelisted Addresses are bypassed during Anti Spam scanning while s from Blacklisted Addresses are blocked. This article describes how you can create White List and Black List and use them for allowing or blocking s. Scenario This article consists of Two (2) sections: Whitelist: Create a Whitelist and allow all mails from member Address without scanning. Blacklist: Create a Blacklist and block mails from member Addresses. Prerequisite Anti Spam module should be subscribed. Configuration You must be logged on to the Web Admin Console as an administrator with Read-Write permission for relevant feature(s). Whitelist Step 1: Create Address Group Create an Address Group called Whitelist consisting of Addresses whose s are to be bypassed while Anti Spam scanning. To create Group, go to Anti Spam > Configuration > Address Group and click Add to create a group using following parameters.

2 Name WhiteList Specify a name to identify the Group Group Type Address/Domain Specify the Group Type Type Address(s)/Domain(s) Manual john@cyberoam.com jessica@cyberoam.com Select the type of Address Group from the available options Specify Address or Domain Name to be added to the Address Group. Click OK to create Address Group. Step 2: Create Spam Rule Create Rule to bypass s from Addresses specified in Whitelist Address Group. To create a Rule, go to Anti Spam > Spam Rules > Spam Rules and click Add to add a new Rule.

3 Name Accept_WhiteList Specify a name for Anti Spam Rule. Recipient Any Address Select Recipient Address from the list. Sender IF condition WhiteList (as created in step 1) Select None Select Sender Address. Select IF condition. Select None when you want to create a rule between specific sender and recipient without any conditions. You can set actions for SMTP and POP3/IMAP mails only on the basis of sender and recipient. SMTP Action Accept Select Action to be taken for the SMTP traffic. POP3/IMAP Action Accept Select Action to be taken for POP3 / IMAP traffic. Click OK to save Rule. Step 3: Enable Anti Spam Scanning in Firewall Rule Go to Firewall > Rule > Rule and select the Firewall Rule in which you want to enable SMTP scanning. Under Advanced Settings > Security Policies, enable SMTP in AV & AS Scanning.

4 Blacklist Step 1: Create Address Group Create an Address Group called Blacklist consisting of Addresses whose s are to be blocked. To create Group, go to Anti Spam > Configuration > Address Group and click Add to create a group using following parameters. Name BlackList Specify a name to identify the Group Group Type Address/Domain Specify the Group Type Type Address(s)/Domain(s) Manual mark@cyberoam.com alice@cyberoam.com Select the type of Address Group from the available options Specify Address or Domain Name to be added to the Address Group.

5 Click OK to create Address Group. Step 2: Create Spam Rule Create Rule to block s from Addresses specified in Blacklist Address Group. To create a Rule, go to Anti Spam > Spam Rules > Spam Rules and click Add to add a new Rule. Name Block_BlackList Specify a name for Anti Spam Rule. Recipient Any Address Select Recipient Address from the list. Sender IF condition Black (as created in step 1) Select None Select Sender Address. Select IF condition. Select None when you want to create a rule between specific sender and recipient without any conditions. You can set actions for SMTP and POP3/IMAP mails only on the basis of sender and recipient. SMTP Action Drop Select Action to be taken for the SMTP traffic. POP3/IMAP Action Prefix Subject To Spam: Select Action to be taken for POP3 / IMAP traffic.

6 Click OK to save Rule. Step 3: Enable Anti Spam Scanning in Firewall Rule Go to Firewall > Rule > Rule and select the Firewall Rule in which you want to enable SMTP scanning. Under Advanced Settings > Security Policies, enable SMTP in AV & AS Scanning. Document Version: July, 2014