SpamFilter.ini additional settings |
Top Previous Next |
[server settings] ;Set this to 1 if you want to disable EHLO extensions DisableEHLO=0
;Any emails whose text portion exceeds this number of KB will not be scanned for keywords and Bayes ;Higher values *may* catch more spam but will cause higher load on processor MaxMsgSizeForKeywordScan=64
;Any emails whose text portion exceeds this number of KB will be whitelisted. Most spam emails are small in size, lowering this value may help in reducing the chances of incorrectly blocking valid emails with large attachments MaxMsgSizeForSpamFiltering=768
;Set FilterBase64html to 1 if you want to block any emails with Content-Transfer-Encoding=base64 and Content-Type=text/html or text/plain FilterBase64html=0
;Set RequireHELOBeforeMAILFROM to 0 if you do not want to require remote servers to issue a HELO or EHLO command before sending the email RequireHELOBeforeMAILFROM=1
;Controls the minimum number of good and spam emails that must be received before the Bayesian filter kicks in MinEmailsForBayesKickIn=5000
;by default SpamFilter will not allow any IP to relay thru it. Change DoNotTrustSelfByDefault to 1 if you want localhost to be able to relay DoNotTrustSelfByDefault=0
;Remove any stale token in the corpus db.dat file that did not appear in incoming emails for the past n days CleanUpCorpusIntervalDays=7
;Force disconnect of sessions after they have remained connected for this long IdleDisconnectMinutesTimeout=15
;Force disconnect of sessions if a command has not been received within the last nn seconds ReadTimeout=60
;Timeout when delivering emails to the destination SMTP server (in seconds) ReadTimeoutOutgoing=60
;if turned on, this will cause tokens in incoming emails being logged to screen with relevant probabilities ShowBayesianTokens=0
;Set TagSPAMAndQuarantine=1 if you want to prefix every quarantine subject line with the prefix specified in SPAMTagPrefix ini parameter TagSPAMAndQuarantine=0
;This SPAMTagPrefix will be prefixed to all subject lines marked for "mark as SPAM and deliver" along with the ation specified by TagSPAMAndQuarantine SPAMTagPrefix=SPAM:
;This SPAMTagHeader will be added to the email headers for emails marked for "mark as SPAM and deliver" along with the ation specified by TagSPAMAndQuarantine SPAMTagHeader=X-SF-SPAM:Y
;Setting DoNotSendNDROnQuarantine to 1 will prevent generation of NDR when email are quarantined by causing SpamFilter *not* to send an error code when quarantining emails DoNotSendNDROnQuarantine=0
;If turned on, the threads that save to disk and load into memory the bayes corpus tokens will have increased priority BoostBayesPriority=1
;if TrailingSQLSemiColon is set to 1 SpamFilter will add a ";" to the end of SQL statements. Disable only to help solve problems with some databases. TrailingSQLSemiColon=1
;If turned on, any quarantined (false positives) emails that the end user force-delivers will cause the sender to be automatically whitelisted AutoWhiteListForceDeliveryEnabled=1
;if EnableBadMailDir is set to 1, this will cause all emails that generate a "server error" when forwarded to your destination SMTP server will be saved in a "BadMailDir" for troubleshooting EnableBadMailDir=0
;if ScanReceivedHeaders is set to 1 SpamFilter will add the "Received:" headers to the text examined for keywords and statistical Bayesian searches. ScanReceivedHeaders=1
;if ScanAllHeaders is set to 1 SpamFilter will add all email's headers to the text examined for keywords and statistical Bayesian searches. ScanAllHeaders=0
;Path to logfile directory LogFilePath=
;Optional destination SMTP server where to forward SPAM emails only. Good emails are still forwarded to main SMTP server DestSMTPServerForSPAM=
;Optional destination SMTP server's port where to forward SPAM emails only. Good emails are still forwarded to main SMTP server DestSMTPServerForSPAMPort=
;If SpamFilter is configured to "tag and deliver" emails, you can also re-route all spam emails to a different email address. ;Spam emails can either be forwarded to an "absolute" email address, or to a specific email address or each domain. ;For example, to forward *ALL* spam emails to one specific email address (i.e. "SpamBucket@mydomain.com), use the following parameter: ; ;ForwardAllSPAMtoEmailAddress=SpamBucket@mydomain.com ; ;To forward all spam emails to a specific mailbox, depending on the recipient's domain - for example to forward all spam sent to ;the mydomain1.com to "SpamBucket@mydomain1.com", and to forward all spam sent to ;the mydomain2.com to "SpamBucket@mydomain2.com", ;use the following parameter, but leaving the domain name blank. SpamFilter will dynamically append the correct email domain depending on the recipient of the spam: ;ForwardAllSPAMtoEmailAddress=SpamBucket@
;The frequency in seconds for which the quarantine table is scanned to check for emails pending delivery - includes web-access password registration emails QuarantineToDeliverCheckInterval=5
;By default the activity logfile is saved to disk every 60 seconds. Set RealtimeDiskLogging=1 to save the log every time it is updated RealtimeDiskLogging=0
;Add any IPs (separated by commas - no wildcards) that you do not wish to be automatically added to the Honeypot IP blacklist. This setting also prevents those IPs to be added to the IP cache blacklist DoNotAddIPToHoneypot=
;An alternate server for sending NDR (non-delivery) notification emails can be used. Leave the "NotificationSMTPServer" value blank to use the default destination SMTP server NotificationSMTPServer= NotificationSMTPServerPort=25
;Set EnableDbgLogs=1 to enable separate detailed logging for troubleshooting purposes EnableDbgLogs=
;The timeout in milliseconds for all DNS-related queries. DNSTimeout=5000
;If an IP sends more than this number of spams in a certain period of time then it is temporarily banned (blacklisted) IPCacheLimboCountTrigger=3
;If an IP sends more than a certain number of spams during this number of minutes then it is temporarily banned (blacklisted) IPCacheLimboTimeTrigger=10
;If an IP address was banned because it sent too many spams in a certain time interval, it will be un-banned after this number of minutes IPCacheBlacklistDuration=60
;You can force the antivirus plugin to block emails if they contain password protected archives that cannot be tested for viruses by setting this to 1 BlockArchivesWithPassword=0
;By default SpamFilter will only perform DNS lookups when the reverse DNS filter is enabled. Change value to 1 to always perform a reverse lookup on connecting IPs AlwaysDoReverseDNSLookups=0
;Specifies how often the logfiles are rotated (Min=1, Max=24). The default is 24 (rotates at midnight). A value of 1 means every hour at the hour, value of 2 means at 2am, 4am, 6am etc... RotateLogsEveryNNhours=24
;Change DoNotStartWithoutAV to 1 if you do not want SpamFilter to start/run if there is an error with the Antivirus plugin. DoNotStartWithoutAV=0
;Number of hours SpamFilter will retry to deliver messages in queue to your destination SMTP server if it was unreachable. Enter 0 to try forever until back online. ExpireRetryQueueHours=0
;Determines if SpamFilter should hold in the queue emails that were rejected by the destination SMTP server with an error in the 4xy range QueueIfDestinationError400=true
;Determines if SpamFilter should hold in the queue emails that were rejected by the destination SMTP server with an error in the 5xy range QueueIfDestinationError500=false
;Determines if SpamFilter should remove from the queue emails that could not be delivered to the destination SMTP server due to a "Read Timeout" (an NDR is sent if the email is removed from the queue) DoNotQueueIfReadTimeout=false
;Image filter threshold. Higher values indicate a more aggressive filter. 0 disables the filter. Min=0, Max=15 SpamImageThreshold=10
;Image filter color sensitivity. Used internally to detect color shades SpamImageColorSensitivity=20
;Images embedded in email's html having a width smaller than this will not be scanned. Useful to bypass signatures and logos SpamImageMinWidth=300
;Images embedded in email's html having a height smaller than this will not be scanned. Useful to bypass signatures and logos SpamImageMinHeight=300
;Determines the number of points that will be scanned in a image to process it for spam SpamImageSamplingPoints=200
;to reduce false positives, emails with multiple inline images can bypass the image filter by setting this value to 1 SpamImagePassMultiImage=1
;Specify the max number of pages a PDF document must contain in order to be scanned for spam signatures. The scan will be skipped altogether if there are more than this number of pages SpamPDFMaxPagesToScan=2
;Specify the max number height in pixel of a PDF pages that will be scanned for spam signatures. To reduce false positives, pages taller than this will not be scanned SpamPDFMaxPixelHeight=800
;SpamFilter can block emails that contain only an empty, blank body and one of the following attachment. Clear the list if you don't want to stop such emails. Specify multiple attachments separated by commas BlockBlankEmailsWithAttachments=*.pdf
;Set this to 0 to prevent queued emails to be spooled to memory, and force spooling to disk. While less efficient, spooling to disk helps allow existing antivirus software to detect and block some infected email files SpoolQueueFilesToMemory=1
;If the private key of the SSL certificate is protected by a password, enter is here SSLCertificatePassword=
;Some older email clients have a bug that requires them to see "AUTH=LOGIN" in the EHLo response rather than "AUTH LOGIN". Set this to 1 to add the incorrect syntax to the EHLO output. Changes to this setting require SpamFilter to be restarted AddIncorrectAUTHLOGINEHLOEntry=0
;Timeout in seconds used in the some SQL commands (Ex. inserting a new record in the tblQuarantine table) MiscSQLTimeout=1
;SpamFilter Enterprise will delete temporary entries in the tblReloadTableInfo after they have been kept for this long. This parameter is used to allow multiple installations of SpamFilter Enterprise to maintain their settings in sync. It can be reduced to 5-10 seconds for installations running only one instance of SpamFilter Enterprise SecondsToHoldEntriesIntblReloadTableInfo=600
;If the "AuthorizedTO" whitelist is used to specify the list of valid email addresses that can be accepted, by default SpamFilter will terminate a connection when the remote server specifies an invalid address in the RCPT TO command. You can use the following option to disable this forced disconnect, and cause SpamFilter to simply reject the invalid recipient, and continue to accept additional ones DisconnectOnNonAuthorizedTO=true
;Use this option to prevent SpamFilter from performing the routine cleanup of the quarantine database by deleting old archived emails. Useful if admins want to perform their own cleanup DoNotDeleteExpiredEmailsFromQuarantine=false
;SpamFilter is able to block blank emails that contain specific attachments. This parameter is used to specify the threshold of characters below which an email is considered blank MaxLettersToConsiderEmailBlank=2
;The amount of time in minutes the hash signature for an email content is kept in memory. If another signature is not received during this time, the has is removed from memory. Used in the SFDC filter HashCacheBlacklistDuration=60
;The interval in seconds that must pass from the initial connection of an IP address to when it is allowed to connect to SpamFilter again. Used in the greylist filter GreyListInterval=300
;The number of hours for which an IP will be held in the GreyList limbo before being removed. If the IP does not make a second attempt to deliver email before this many hours after the initial attempt, it will be removed from the GreyList limbo, and it will have to repeat the process next time it connects. GreyListLimboHold=12
;The number of days for which an IP that passed the GreyList limbo and has been allowed to connect will remain allowed to do so. After this many days from the initial contact, the GreyList process will have to be repeated. GreyListAllowedHold=60
;Set thie value to 1 to enable the GreyList filter GreyListEnabled=0
;SpamFilter uses the http and https protocols to query the SFDB database and to download antivirus updates. You can specify a proxy to use for these operations the the option in the [proxy settings] section [proxy settings] ProxyServer= ProxyUsername= ProxyPassword= ProxyPort=0 ProxyBasicAuthentication=0
[authentication settings] ;By setting this parameter to 1, SpamFilter will automatically add the Active Directory domain name prefix to the username. For example, if the AD domain is logsat.com, and the username is JohnW, SpamFilter will automatically authenticate the user as logsat.com\JohnW ActiveDirectoryAuthPrefixDefaultDomain=0
;By setting this parameter to 1, SpamFilter will automatically add the Active Directory domain name suffix to the username. For example, if the AD domain is logsat.com, and the username is JohnW, SpamFilter will automatically authenticate the user as JohnW@logsat.com ActiveDirectoryAuthAppendDefaultDomain=0
|