MX LOGIC SPAM FILTERING

Transcription

1 MX LOGIC SPAM FILTERING 21 March 2009, Version 1.0 WHAT IS MX LOGIC? In response to the large amount of spam received on KickStart addresses, the organization has enlisted MX Logic, a hosted filtering service. MX Logic s Defense Service receives all mail sent to kickstart.org addresses and filters it for viruses and spam. The clean mail is then passed to the KickStart servers for distribution to the end user. When messages are blocked as spam, they are placed into an online quarantine for five days. Kickstart staff who have an quarantined by MX Logic will be sent a Spam Quarantine Report (SQR). This report will allow you to review, delete, or release the to your Inbox. You may also create Allow or Deny rules for individual addresses. While MX Logic has accuracy rates as high as 99.7%, some legitimate messages may get caught in the filter so it is important to review the SQR daily. Access to MX Logic and the associated Message Quarantine requires Internet access. MXLogic_Spam_Filtering.docx Page 1 of 8

2 SIMPLE INSTRUCTIONS TO RELEASE A BLOCKED MESSAGE To release a message caught in the MX Logic quarantine: 1. Open the Spam Quarantine Report message. 2. Click the link that follows the To view all quarantined messages, go to: 3. Use the drop down menu in the upper left to select the day you want. Find the message that you want to release. 4. Check the box to the left of the desired message. 5. Click the Release button. The message will now be delivered to your Exchange Mailbox. Note: To find out more about additional settings, developing Allow or Deny lists, and other features, please refer to the remainder of this document. MXLogic_Spam_Filtering.docx Page 2 of 8

3 SPAM QUARANTINE REPORTS Blocked messages are held in quarantine on MX Logic s servers. For each user, MX Logic automatically adds a summary of the message s details (Date, Size, Sender, Subject) to a Spam Quarantine Report (SQR). SQRs are forwarded to each mailbox holder once per day. Note: An SQR will not be sent to a mailbox holder if no messages were quarantined that day. SQRs are delivered in the form of an and will contain a subject of Spam Quarantine Summary for user@kickstart.org. The sender will be ucereport@mx Logic.com. An example is shown below: VIEWING QUARANTINED MESSAGES To view a summary of quarantined messages, open the containing the Spam Quarantine Report. The SQR will look something like this: Notice the Date, From, Subject, Score, and Size fields. The Score field displays the likelihood (in a percentage) that the MX Logic spam filters have determined the quarantined message in question is indeed spam. The higher the Score, the more likely that the message is spam. MXLogic_Spam_Filtering.docx Page 3 of 8

4 MANAGING QUARANTINED MESSAGES In many cases, you may decide that all of the quarantined messages in the SQR are indeed spam. In this case, you do not need to take any action. The quarantined messages will automatically be deleted from the MX Logic servers after five days. However, some legitimate messages may have been quarantined as well. To release messages from the quarantine: 1. Open the SQR message. 2. Click the hyperlink that follows the To view all quarantined messages, go to: Note: Alternatively, you may access this quarantine by going to Logic.com. 3. Clicking this link will automatically log you into your Kickstart account s Message Quarantine page. The Spam Quarantined Messages for page lists all of the quarantined messages for the account of the user currently logged on. 4. In the drop-down menu (upper left), you can select all quarantined message or just a specific day. MXLogic_Spam_Filtering.docx Page 4 of 8

5 Once you have found the legitimate message, you can view it, release it, or add it to your allow list. 1. View a message by highlighting a row and double-clicking anywhere in that row. This displays the Safe Message View tab which contains the message's information. 2. To release a message, select its checkbox and click the Release button. 3. To permanently delete a message from the quarantine, select its checkbox and click the Delete button. 4. To add the sender s address to the allow list, select its checkbox and click the Always Allow button. The messages are released and all senders' addresses are added to the recipient's Allow List. All future messages from the senders will no longer be quarantined 5. When you have finished working in the MX Logic Portal, be sure to logout: MXLogic_Spam_Filtering.docx Page 5 of 8

6 ALLOW/DENY SENDER LISTS You can define lists of senders whose addresses either will always be accepted without spam filtering (Allow list) or will never be accepted for delivery (Deny list). You can add senders using the Message Quarantine window (described above) or using the Allow/Deny Sender Lists window. Note: A common technique of spammers is to change their sender address often or even hijack an innocent user's address to send spam. Be aware that your Deny list may not prevent future spam s from these spammers. The Deny list primarily is used to block s from unwanted senders who consistently send from the same address (for example, unwanted sales s from a known company). The maximum number of addresses/domain names allowed in the Allow list is 300. The maximum number of addresses/domain names allowed in the Deny list is 200. To use the Allow/Deny Sender Lists window: 1. Login to the MX Logic Portal ( Logic.com). 2. Click the Allow/Deny link in the MX Logic Portal: 3. To add a sender whose address should always be accepted, enter the address in the Add Entry box under the Allow List section and click Add >> : 4. To add a sender whose address should always never be accepted, enter the address in the Add Entry box under the Deny List section and click Add >> : MXLogic_Spam_Filtering.docx Page 6 of 8

7 5. The following values are allowed in list entries: a. Domain Name - qualified domain name (for example, xyz.com) or subdomains (for example, *@*.xyz.com allows s from any subdomain of the XYZ domain, such as user@abc.xyz.com). If you know you want to allow all s from this domain, then use this option instead of typing in each address associated with the domain b. Sender Address - complete address (for example, user@xyz.com) or partial address (for example, user*@xyz.com or *@xyz.com) 6. Optionally, you can save the contents of your Allow list or Deny list into a spreadsheet file that is compatible with Microsoft Excel. The predefined list must be in the following format: a. Text file i. One entry per line (domain name or address) ii. File must be available for your browser to access 7. When you have finished working in the MX Logic Portal, be sure to logout: MX LOGIC PREFERENCES The Preferences\Setup window is the location where you specify settings that control your Spam Quarantine Reports. To access the Preferences\Setup window, click on the Setup link: On the Preferences\Setup window, you can do the following: 1. Select Spam Quarantine Report Frequency - This option allows you to select how often you receive your Spam Quarantine Report or Spam Quarantine Summary 2. Set a Time Zone for Your Processing - This procedure allows you to designate the time zone that will be used when you log on to the Control Console. The Control Console will use the designated time zone to timestamp the relevant displayed information. 3. Select Entries per page - You can manage the Spam Quarantine Report to display the following number of "Entries per page": 5, 10, 25, 50, 100. The default list length is 25. Links to the next pages appear on the list window if there are more entries than your "Entries per page" choice. MXLogic_Spam_Filtering.docx Page 7 of 8

8 4. Select a Spam Quarantine Report Language - This option allows you to select the language in which you want your Spam Quarantine Report to display. Be sure to click Save to save your preference settings any time that you make any changes in this window: 5. When you have finished working in the MX Logic Portal, be sure to logout: MXLogic_Spam_Filtering.docx Page 8 of 8