ProSecure Web/Email Security Threat Management (STM) Appliance Reference Manual
4-16
Content Filtering and Optimizing Scans
v1.0, September 2009
3.
Real-time blacklist
. E-mails from known spam sources that are collected by blacklist
providers are blocked.
4.
Distributed spam analysis
. E-mails that are detected as spam by the NETGEAR Spam
Classification Center are either tagged or blocked.
This order of implementation ensures the optimum balance between spam prevention and system
performance. For example, if an e-mail originates from a whitelisted source, the STM delivers the
e-mail immediately to its destination inbox without implementing the other spam prevention
technologies, thereby speeding up mail delivery and conserving the STM system resources.
However, regardless of whether or not an e-mail is whitelisted, it will still be scanned by the
STM’s anti-malware engines.
You can configure these anti-spam options in conjunction with content filtering to optimize
blocking of unwanted mails.
Setting Up the Whitelist and Blacklist
You can specify e-mails that will be accepted or blocked based on the originating IP address,
domain, and e-mail address by setting up the whitelist and blacklist. You can also specify e-mails
that will be accepted based on the destination domain and e-mail address.
The whitelist ensures that e-mail from listed (that is, trusted) sources and recipients are not
mistakenly tagged as spam. E-mails going to and from these sources and recipients are delivered to
their destinations immediately, without being scanned by the anti-spam engines. This can help to
speed up the system and network performance. The blacklist, on the other hand, lists sources from
which all e-mail messages will be blocked You can enter up to 200 entries per list, separated by
commas.
To configure the whitelist and blacklist:
1.
Select
Security
>
Anti-Spam
from the menu. The Anti-Spam submenu tabs appear,
with the Whitelist/Blacklist screen in view (see
Figure 4-6 on page 4-17
).
Note:
The whitelist takes precedence over the blacklist, which means that if an e-mail
source is on both the blacklist and the whitelist, the e-mail will not be scanned by
the anti-spam engines.
DRAFT