Configuring Antispam Settings in ScreenOS (NSM Procedure)
To configure a security device for antispam, you must turn on antispam in a policy and configure antispam settings on a device.
To configure antispam settings:
Double-click a security device in Device Manager.
Select Security > Antispam.
Populate the listed boxes:
Antispam Whitelist—E-mails that contain e-mail addresses, IP addresses, hostnames, or domain names in this list will always be accepted by the filter, even if the e-mail also matches an entry in the blacklist.
Antispam Blacklist—E-mails that contain e-mail addresses, IP addresses, hostnames, and domain names in this list will be tagged or blocked, unless the e-mail also contains a match in the whitelist.
Action for Spam—Indicates whether email that matches a blacklist entry will be tagged and passed along or blocked.
Tag Subject or Header—If blacklist e-mails are to be tagged, indicates whether the tag will be placed in the header or subject line of the e-mail before it is passed on.
Tag String—If blacklist e-mails are to be tagged, indicates the character string that will be placed in the e-mail.
Enable use default SBL server—If checked, compare e-mails that do not match the local blacklist or whitelist to the blacklist of known spammers on the Juniper Networks server. If this check box is clear, only the local lists will be used.
Click OK to save the changes.
Install an antispam license key to enable the antispam option on the security device. For more information, see “Managing Devices” in the Network and Security Manager Administration Guide.
To check the status of the antispam option for a device:
Double-click the device configuration and select Info > Capabilities. If the license has been installed, Antispam Profiles is enabled.
Double-click the my_antispam_policy policy.
Double-click the Rule Options cell in the desired rule row.
Select the Antispam tab in the Configure Options dialog box.
Select the Enable Antispam Profile check box.
Select ns-profile from the Profile Name pull-down menu.
Click OK to close the Configure Options dialog box.
In the following example, you configure the device and put the string ***SPAM*** in the subject line of e-mails from wesendspam.com.
In the NSM navigation tree, select Device Manager > Security Device > Templates. Double-click a template to open it.
In the device navigation tree, select Security > Antispam.
Click the Add icon in the Antispam Blacklist area.
Enter wesendspam.com in the Entry box, and then click OK.
In the Action for Spam box, select Tag Spam Email.
In the Tag Subject or Header box, select subject.
In the Tag String box, enter ***SPAM***.
Select the Enable use default SBL server check box.
Click OK to save your changes to the template.