Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
services:e-mail_service:antispam_filters [2019/07/22 14:59]
giunta [Barracuda Spam Firewall]
— (current)
Line 1: Line 1:
-====== Anti-Spam & Anti-Virus Filters ===== 
- 
-===== Anti-Spam Filters ===== 
- 
-In the last years the SPAM phenomenon (Unsolicited Bulk & Commercial E-mails) has grown exponentially. Today the SPAM is over the 50% of the total e-mail traffic. In order not to waste time discarding UCE and IBE e-mails, complex filters are required for the incoming e-mail traffic. **SISSA has two filters for the incoming e-mails**. 
-\\ 
-==== SafeMail ===== 
- 
-**The first filter for the incoming e-mail is SafeMail, a commercial product of Spin** (http://​www.spin.it). This software is installed on the incoming e-mail gateway server. This machine is named hermes.sissa.it that is also the Mail Exchanger (MX) for the domain sissa.it. This filter **is applied by default to all the incoming mail** for the domains sissa.it and democritos.it. 
- 
-This software use some RBLs (Real-time Spam Black Lists) to reject SPAM.  
-When SafeMail consider an e-mail as a sure spam, the connection is rejected and it sends an error message to the sender. 
-If it is a real person, he/she can take an action to send again the e-mail. 
-See the page:  
-http://​www.spin.it/​spam/​spam_filters.php3#​eng for information about Spin's anti-spam filters. 
- 
-More information about Spin SafeMail are available at address http://​www.spin.it/​spam/#​eng. 
- 
-Real-time statistics about SafeMail filter are available on the web page  (available only inside SISSA network): ​ http://​hermes.sissa.it/​cgi-bin/​spamstats 
- 
-\\ 
- 
- 
- 
-===== Anti-Virus Filters ===== 
- 
-SISSA mail servers use an antivirus to scan all incoming/​outgoing e-mail messages. This includes scanning e-mail bodies and attachments against known virus signatures as well as blocking certain file types and names (file extensions). The software will also scan compressed attachements. However it should be stressed that nobody should rely on the mail server filtering for complete virus protection. The main purposes of filtering on the mail servers are to minimise the possibility of a serious outbreak of a particular virus, provide protection against new unrecognised viruses and act as a secondary mechanism for detecting infected systems. It is essential, therefore, that you continue to treat ALL e-mail attachments with caution. 
- 
-\\ 
- 
- 
- 
- 
-===== Banned file Types and Extensions ===== 
- 
-Certain file types and extensions pose a significant risk to windows machines, as they are executable by default. Most viruses are spread through e-mail with one of these executable attachements. As such, ITCS has decided to block the following extensions: 
- 
-^Extension^Generic description^ 
-|bat|Batch Processing| 
-|chm|HTML Help Compiled Help File| 
-|cmd|1st Reader External Command Menu| 
-|com|Command / Common Object Module / DOS or CP/M Executable| 
-|exe|Executable File| 
-|hlp|Windows Help File| 
-|hta|Hypertext Application| 
-|ins|1st Reader Install Script / InstallShield Script| 
-|js|JavaScript Source Code| 
-|lnk|Windows Shortcut File| 
-|msc|Microsoft Management Console Snap-in Control File| 
-|msi|Windows Installer File| 
-|pif|Windows Program Information File| 
-|reg|Registry Data File| 
-|scr|Script / Windows Screen Saver| 
-|sct|Windows Script Component| 
-|shb|Windows Shortcut into a Document| 
-|shs|Shell Scrap Object File| 
-|vbs|VBScript Script File| 
-|wsc|Windows Script Component| 
-|wsf|Windows Script File| 
-|wsh|Windows Script Host Settings File| 
- 
- 
-This means you will not be allowed to send/​receive any file whose filename has a banned extension. Where you have a genuine need to send a program as an attachment then you should enclose it in a .zip or .gz file before attaching it. Windows XP and Mac OS X have this functionality built in. Do not create a self-extracting zip file because that will result in an executable type of file that will also be blocked. 
- 
-In order to properly receive a program file as an attachment, you will have to ask the sender to enclose the program in a .zip or .gz file before sending. 
- 
-In both case, remember to DO NOT SET A PASSWORD TO THE ARCHIVE FILE, otherwise the e-mail will be BANNED again. 
- 
-\\ 
-===== Blocked E-mail Notification ===== 
- 
-SISSA mail server will alert users when they receive an e-mail containing a banned content. Our server do NOT reply to external e-mail sender. 
- 
- 
- 
-\\ 
- 
- 
- 
- 
- 
-==== Blocked Notifications for Received E-mail ==== 
- 
-When our mail server finds banned content in an e-mail destined to your e-mail address, it will send you an e-mail. 
-This is example, where: 
-  * //​your_username@sissa.it//​ is your e-mail address. 
-  * //​sender@example.com//​ is the e-mail address of the sender (may be empty in case of spam). 
-  * //​filename//​ is the name (or only the extension ) of the banned file. 
-<​code>​ 
-From: SISSA SISSA Barracuda Spam Firewall <​postmaster@sissa.it>​ 
-To: your_username@sissa.it 
-Subject: BANNED FILE IN MAIL TO YOU (from <​sender@example.com>​) /  
-         FILE BLOCCATO IN UNA MAIL DIRETTA A TE ( spedita da <​sender@example.com>​) 
- 
-BANNED FILENAME ALERT 
- 
-The SISSA Spam Firewall (charon.sissa.it) found an attached ​ 
-file '​filename'​ in an e-mail sent from <​sender@example.com>​. 
- 
-Due to security reason, our system has been set to block this type of file. 
- 
-For further information,​ visit: 
- 
-http://​www.itcs.sissa.it/​services/​e-mail_service/​antispam_filters#​anti-virus_filters 
- 
-------------------------- 
-  ​ 
-AVVISO FILE BLOCCATO 
- 
-L'​anti-spam della SISSA (charon.sissa.it) ha trovato un file '​filename' ​ 
-allegato ad una mail inviata da <​sender@example.com>​. 
- 
-Per motivi di sicurezza, il nostro sistema ha bloccato questo tipo di file. 
- 
-Per ulteriori informazioni,​ visita: 
- 
-http://​www.itcs.sissa.it/​services/​e-mail_service/​antispam_filters#​anti-virus_filters 
-</​code>​ 
-